With the rapid development of cloud computing and its widespread application, security protection in the cloud environment has become a pressing issue. Aiming at the problem of how to flexibly and dynamically schedule virtualized security devices, this study proposes a service function chain based on software-defined security, builds the security service function chain according to user requirements, and schedules virtual security devices in secure resource pools. The experiment proves the validity of the method in this paper.