Security resource selection implementation method and device

Abstract

The invention discloses a security resource selection implementation method and device, and relates to the field of software definition security. The method comprises the following steps: abstractly describing a security arrangement task to form a unified description information structure of the security arrangement task; based on the unified description information structure of the security orchestration task, screening security resources to determine a security resource preliminary screening list, and determining expected execution completion duration of the security orchestration task; andselecting the optimal security resource by utilizing a security resource selection quantization algorithm based on the predicted quantity of the tasks which are not completed in each security resourcein the security resource preliminary screening list and the expected execution completion duration of the security orchestration task so as to enable the optimal security resource to execute the security orchestration task. According to the invention, based on security orchestration task abstract description, security resource preliminary screening and security orchestration task expected completion duration, the optimal security resource can be selected, and efficient execution of security orchestration services and effective utilization of resources under a software-defined security architecture can be realized.

Description

technical field [0001] The present disclosure relates to the field of software-defined security, in particular to a method and device for implementing security resource selection. Background technique [0002] With the transformation of the traditional information system construction mode to a cloud-based computing framework model, the existing traditional information system network construction, information access, resource selection and other methods will also change. With the emergence of virtualization, cloud computing, and software-defined architecture, people have gradually built software-defined networks, software-defined data centers, and software-defined security systems. The emergence of a new technical system will inevitably bring about new software arrangement and management methods. [0003] In the software-defined security architecture, security services are effectively managed through intelligent and automated security service orchestration and management. I...

AI Technical Summary

Problems solved by technology

[0004] Existing security resource selection is generally based on device resource polling, random selection, or resource current load conditions to select resources to perform orchestration tasks; Polling, random or based on load conditions are all directly selected in one stage, which cannot guarantee the reasonable utilization of resources and efficient execution of tasks

Even if the resource is selected based on the load, it is only calculated based on the resource load at the point in time when the resource is selected, which cannot achieve the purpose of using resources well and executing tasks efficiently.

Images