Study Of Access Security In Cloud Based On SDN

Cloud computing has developed in full swing in recent years and become one kind of hot technology nowadays. As a new service model, cloud computing has a huge advantage than the existing service model in terms of performance, availability, scalability, fault tolerance, and pre-investment. However, the cloud access security issue is a major bottleneck of the cloud commercial development all along. And the access security incidents of cloud computing providers such as Amazon and Google intensified the worries of people on cloud computing. Therefore, it is necessary to analyze and address access security issues that the cloud computing faces, in order to guarantee access security, allowing users to apply for the cloud computing platforms in large-scales and store their data in the cloud safely.The purpose of this paper is to propose a new access security model from the point of access security based on SDN (Software Defined Networking) technology. The paper is consist of the architecture of cloud access security, the service outsourcing based on SDN, the design of network features module, the API design, the optimal path algorithm desigh, as well as the implementation and results. The main content of this paper is as follows:Firstly, this paper has analyzed current situation of access security in cloud computing, summarized the access security problems and raised the architecture of cloud access security.Secondly, this paper has analyzed the existing drawbacks of network functionality module in the cloud computing environment, and raised the idea of service outsourcing based on SDN technology. Then a new architecture of outsourcing the access security monitoring to a third party is proposed which is called Secure Cloud. The cloud services provider (CSP) only interested in data processing and storage here, and Secure Cloud is responsible for delivering the security as a service to the cloud users in this model. Secure Cloud can provide security services such as data integrity, user authorization and attacks and threats detection in response to customer demand. An open API is also designed in Secure Cloud in order to guarantee service scalability in SDN network.Finally, this paper designed the optimal path algorithm on the SDN controller NOX, implemented Secure Cloud based on openflow, which is one of SDN technology and tested the performance parameters, proving the feasibility of the new security services architecture.