本文已被:浏览 1415次 下载 1956次
Received:September 08, 2019 Revised:October 08, 2019
Received:September 08, 2019 Revised:October 08, 2019
中文摘要: 高性能云化WAF方案在WAF流量防护监测上设计了各个处理流程之间的协同调整处理能力以及同步机制,实现了处理步骤之间的能力相互感知,动态变化能力高效协同,解决了传统方案防护效率低的问题.另一方面高性能云化WAF方案在防护引流拓扑上设计了SDN牵引流量和策略下发分离,实现了WAF的并发防护调用,解决了传统方案防护吞吐量低的问题.实验表明高性能云化WAF方案对比传统云WAF防护方案有较高的防护效率,较高的防护吞吐量.
Abstract:By introducing an efficient statistical scheme for WAF traffic analysis processing which provides a mechanism for each processing Flow to dynamically adjust the processing capability, realizes dynamic adjustment processing capability, and realizes coordination adjustment processing capability and the synchronization mechanism between the various processing. On the other hand, in the traditional topology, drainage is started by the virtual network of the host machine or started by a stream serial thread with SDN. By introducing the high concurrent traction scheme in this study, the SDN traction Flow, strategy downward separation, and the concurrent protection of WAF are realized. Experimental results show that the scheme improves the accuracy of WAF protection and improves the WAF throughput.
keywords: WAF traffic statistics concurrent topological drainage
文章编号: 中图分类号: 文献标志码:
基金项目:中国移动公有云项目(C201985-096)
引用文本:
何丹,张悦.高性能公有云WAF安全方案.计算机系统应用,2020,29(4):144-149
HE Dan,ZHANG Yue.High Performance WAF Security Scheme in Cloud Computing.COMPUTER SYSTEMS APPLICATIONS,2020,29(4):144-149
何丹,张悦.高性能公有云WAF安全方案.计算机系统应用,2020,29(4):144-149
HE Dan,ZHANG Yue.High Performance WAF Security Scheme in Cloud Computing.COMPUTER SYSTEMS APPLICATIONS,2020,29(4):144-149