Security scheduling method and system for virtual micro-isolation network

Abstract

The invention provides a security scheduling method and system for a virtual micro-isolation network. The method comprises the following steps: collecting, analyzing and extracting feature vectors andflow table entries in flow data by using an OpenFlow protocol; obtaining a communication relationship between virtual machines in a distributed virtual environment, carrying out micro-isolation grouping on the virtual machines by using clustering processing; verifying whether a network attack behavior exists between the virtual machines in the communication relationship or not; dynamically deploying a security protection strategy for micro-isolation grouping of the virtual machine according to a verification result; the private cloud divides a resource pool into a plurality of resource groupsaccording to the micro-isolation groups, wherein each resource group corresponds to one or more micro-isolation groups, different flows are sent to the corresponding micro-isolation groups after passing through the security components in the corresponding resource groups, detection is carried out again according to the security protection strategies of the micro-isolation groups, and service processing is carried out by the virtual machines in the groups after the detection is passed.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular to a security scheduling method and system for a virtual micro-isolated network. Background technique [0002] Now it is more and more common to use virtualization technology to build data centers, which brings new security issues. In a virtualized network environment, a large amount of traffic data is forwarded through virtual switches instead of firewalls, making traditional security protection measures ineffective. The communication flow between virtual machines becomes uncontrollable, and the threats of internal virtual machines cannot be detected or controlled. There are a large number of virtual machines in a distributed virtual environment. How to dynamically deploy security protection policies is also a technical problem that needs to be solved urgently. [0003] At the same time, each unit will build a private cloud, which may deploy a large number o...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a security scheduling method and system for a virtual micro-isolated network, to solve the lack of control methods for traffic data between massive virtual machines in the prior art and the lack of dynamic deployment security protection strategies, how to solve the problem in the case of private cloud Technical Issues in Scheduling Massive Resources

Images