Research On Software Defined Security Method In Cloud Environment

Cloud computing is a new model of Internet-based IT services.Through the network,the scalable and virtualized IT resources can be provided for users on demand in the form of services dynamically. Currently the cloud computing is one of the most noteworthy technol ogical revolution in the world.With the rapid development of the cloud computing, A large number of enterprises and individuals deploy their own business in the cloud.Virtualization brings many benefits and incurs a number of new security challenges,cloud computing security has been duly noted.For axample,some traffic has been attacked in the cloud environment,It is a traditional approach that import the whole traffic into the hardware security equipment, it makes the normal traffic has also been detected, affects the operation of the normal traffic,it can not implement the flexible control of the network traffic.On the other hand, due to the various types of security threat,Through the deployment of the corresponding hardware security devices in the cloud increases the cost,and these hardware security equipment have difficulty in upgrade and interaction.Therefore,how to make security can be defined by software in the cloud has great significance.The main work of this thesis is as follows:(1) SDN is stated in the paper,SDN is a new technology in the network field,this technology has the following characteristics:realizes the network-control programmable,formulates forwarding strategy flexibly;abstracts the function of network control in the forwarding device,controls all the forwarding device centralized;abstracts the function of network forwarding,provides a unified forwarding control interface.(2) The NFV architecture is stated in the paper,it decouples the hardware and software of traditional equipment,it changes the network architecture by pooling resources with virtualization technology.(3) Based on SDN and NFV,a framework of software-defined security for clouding computing is constructed,this framework can control network traffic flexibly,Virtual security device can be rapidly and elastically provisioned.