A security service chain dynamic orchestration device

Abstract

The invention discloses a safety service chain dynamic arrangement device, which relates to the technical field of network safety. The device includes a traffic classification module, a security function virtual machine management module, a lightweight virtual security resource management platform, a network management module, and a flow table generation module; the traffic classification module is used to generate a traffic classification result flow table; the security function virtual machine management module Manage the security function virtual machine; the lightweight virtual security resource management platform realizes the creation, startup, deletion and other operations of the security function virtual machine; the network management module realizes the network configuration of the security function virtual machine; the flow table generation module is used to generate Flow traction meter. Through the security function service chain, the present invention can provide differentiated security protection capabilities for different flows according to security requirements and network status, and provide fine-grained, definable, and diversified security protection means for the network, and has broad application prospects.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a security service chain dynamic orchestration device. Background technique [0002] Existing network security protection measures include multi-layer security protection equipment such as host security, network security, application security, and security management, realizing the improvement from single-device protection to in-depth security defense capabilities for the entire network. However, there is still a certain gap in dealing with high-intensity confrontation under the conditions of future informationized warfare. Mainly manifested in the following aspects: [0003] (1) The static and passive border security protection system is the main one. Once the existing security protection equipment is installed and deployed, it will be in a static state, lacking the ability to continuously upgrade, dynamically maintain security policies, and dynamically deploy and adju...

AI Technical Summary

Problems solved by technology

[0003] (1) The static and passive border security protection system is the main one. Once the existing security protection equipment is installed and deployed, it will be in a static state, lacking the ability to continuously upgrade, dynamically maintain security policies, and dynamically deploy and adjust security functions on demand in complex network environments;

[0004] (2) The management and control interfaces of safety protection equipment are not unified, which adds a lot of inconvenience for operators to use and configure safety protection equipment

[0008] However, there is still a lack of technology that can meet the above needs in the prior art

Images