Research Of Network Resource Security Protection Technology Based On The NFV

NFV,namely network virtualization functions,using cloud computing technology,through the use of general hardware such as x86 and virtualization technologies,is used to carry a lot of function of the software,thereby reducing network capital expensive equipment.Relative to the traditional network architecture,network virtualization functions resolve the coupling function of traditional special equipment hardware and software,network virtualization functions is no longer dependent on dedicated hardware.Virtualization technology are introduced to pooling the physical resource,the network architecture major changes accordingly,how to ensure the isolation and protection of the resource pool of network resources is one of the problems need to be solved,so NFV has the important practical significance on the research of the security protection technology of NFV system.This paper,based on the problem of the security network of resource pool and network security isolation based on network virtualization functions,analyzes network virtualization functions architecture,puts forward the solution that the resource pool system adopts modular and hierarchical classification scheme,combined with the security domain isolation technology of the network resources to ensure the security isolation and protection,and finally,in combination with mobile communication network for integrated evaluation of network virtualization functions system,verify the validity,reliability,security of the NFV system.The main contents and innovation points are as follows:(1)Analysis of the function of network virtualization architecture,this paper analyzes the NFV in the use of telecommunication core network,focuses on the introduction of NFV infrastructure layer,virtual resource layer,network layer three layer structure.(2)Studied and puted forward modular,hierarchical network partitioning solutions to resource pool system.Combined with the security domain isolation technique,divided network plane and level of network resource pool system respectively from the horizontal and vertical to division,to ensure the security isolation and protection of resourses.(3)Designed a kind of resource security isolation scheme based on function of network virtualization.Combined the technology of security domain,NFV resource pool in the framework of security domain is divided by combining physical isolation and logical isolation,as well as on the basis of ensuring system safety,improves system flexible deployment and efficient use of resources.(4)Finally,evaluated network scheme based on NFV architecture of virtualization IMS core network system.In this paper,provided system evaluation scheme and evaluating the environment based on NFV architecture of virtualization IMS,verify the feasibility of NFV systems reliability,expansibility and security by China mobile research institute test environment.