Research Of Virtualization Hash Security Access Path For Cloud Computing Routing Platforms

Distributed denial of service(DDoS) attack is one of the main threats in large-scale network and one of the key problems in the protection of Cloud Computing. The protection of Cloud Computing against DDoS attack is studied in the paper and the protection of CCRP(Cloud Computing Routing Platform) against DDoS attack is focused on.The influence of DDoS attack and LDoS attack in the Cloud is studied. The heartbeat mechanism of Cloud makes DDoS attack become less effective. The LDoS attack does not congest the link so it will not block the heartbeat information. In order to verify the effect of the heartbeat mechanism, the attack experiment in Hadoop platform is carried on in the paper.The effect of the two kinds of attack on the file transfer service in Cloud is compared. The experiment results show that DDoS attack has a small influence on Cloud Computing because of the heartbeat mechanism. So the main work of the defence in Cloud against DDoS attack lies in the external aspect. The existing Security Overlay Service(SOS) which is used for the defense of DDoS in large-scale network is studied. It reveals the shortcoming that the node will simply exit when it is attacked. The consistent hashing algorithm Chord is improved according to the routing policy to apply to the VHSAP(Virtual Hash Security Access Path)for CCRP. The heartbeat mechanism and the technology of virtual machine are introduced to make the node become virtual and switch to another seamlessly when it is attacked. The experiment about the performance of the VHSAP against DDoS attack is carried on in the paper. Some kinds of parameter are focused on in the experiment like different numbers of attacked nodes and different time delays of the switch. The experiment results show that the VHSAP has higher pass rate of data than SOS.