基于SDN和NFV技术的网络安全架构

基于软件定义网络(SDN)和网络功能虚拟化(NFV)的新型网络取代传统网络势在必行,因此研究基于新网络环境的网络安全体系结构迫在眉睫.介绍了一种开放且通用的软件定义的SDS安全架构,它可以为安全服务、安全设备和安全管理提供一个开放的接口,并且支持不同的网络安全供应商部署其安全产品和安全解决方案.此外,可以实现虚拟安全功...

Network Security Architecture Based on SDN and NFV Technologies

It is imperative that the new network with software-defined network and network function virtualization will replace the traditional network,so it is valuable and necessary to study the network security architecture based on the new network environment.Thus,this paper proposes an open and universal software-defined security SDS architecture.Firstly,this architecture provides an open interface for security services,security devices,and security management.Secondly,this architecture enables different network security vendors to deploy security products and security solutions.It also has the deployment,arrangement and customization of virtual security functions,and implement the fine-grained data flow control and security policy management.At last,this paper analyzes the different types of attacks that different parts of the system are vulnerable.Therefore,the defender can control the network attacks according to change the server-side security configuration scheme.