Automatic Scheduling Deployment Framework for Security Service Chain Based on SDN/NFV
CSTR:
Author:
Affiliation:

Clc Number:

Fund Project:

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    Aiming at the security protection in virtual environments such as cloud computing, an automatic scheduling deployment framework of security service chain based on SDN/NFV is proposed in this paper. The ABAC strategy model is extended to describe the security requirements of users and priorities are used to solve the policy conflicts to arrange virtualized security appliance. The load of each virtualized security appliance instance and the real-time link transmission delay are quantified to dispatch network traffic. Finally, the flow table generated by SDN controller is sent to the network to complete traffic redirection and implement the process of automatically building the security service chain according to the security requirements. The entire framework is implemented in the experimental environment to achieve the automatic scheduling deployment based on floodlight, virtualized security appliance, and it has obtained anticipatory effects.

    Reference
    Related
    Cited by
Get Citation

张奇.基于SDN/NFV的安全服务链自动编排部署框架.计算机系统应用,2018,27(3):198-204

Copy
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:February 27,2017
  • Revised:March 27,2017
  • Adopted:
  • Online: February 11,2018
  • Published:
Article QR Code
You are the firstVisitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-3
Address:4# South Fourth Street, Zhongguancun,Haidian, Beijing,Postal Code:100190
Phone:010-62661041 Fax: Email:csa (a) iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063