Design And Implementation Of Cloud Security Service Platform

Security service is an important component for maintaining software security and protecting business data.It is essential to ensure software security whether in a traditional environment or in a cloud environment.With the widespread application of cloud services,security problems appear frequently,but traditional security services are not suitable for cloud environments.Therefore,howto deploy,use,and manage security services in the cloud environment has gradually become a topic of concern.This project focuses on the deployment,use and management of cloud security.services,and analyzed the software defined security(SDS)solutions at home and abroad contrastively.A cloud security service platform is designed and implemented according to the actual business scenario.The platform virtualizes multiple security services into a pool of security service components,providing protection capability for multiple tenants.Support tenants to purchase,change and configure security services independently,and support unified identity identification,access management,platform status monitoring and operation maintenance,so as to meet the security needs of business software and data of different tenants.Firstly,the organization and business process is object-oriented analyzed,pivotal user roles and use cases are sorted out,functional requirements and non-functional requirements such as performance requirements and security requirements are clarified.Afterwards,based on actual requirement,having a design in general including system structure,interfaces and database.Then,Identity Access Management,multi-tenancy management and container's management are design in detail and implemented.Finally,the deployment of the system is completed and the function,security test and running state monitoring are carried out.After testing,the function and security of the cloud security service platform meet expectations.The operation results shows that the platform not only effectively solves the deployment,use and management of security service in the cloud environment,but also reduce the cost of hardware and maintenance.It is more flexible and more extensible,and more in line with tenant's personalized security needs in cloud environment.