摘要
提出了一种基于云计算的安全管理平台模型。该模型采用先进的云计算技术,利用其提供的强大的数据处理能力解决海量安全事件处理效率低的难题;实现对网络安全设备的分布化、虚拟化、服务透明化的实时管理;充分保证网络的安全性、可靠性,降低网络风险。通过与传统的安全管理平台的比较表明,该模型在数据处理能力、安全性、高可用性等方面性能显著提高。
A new model of security operations center(SOC) based on cloud computing is presented.The advanced cloud computing technology is used in the model to improve the efficiency of dealing with massive security alerts by utilizing the high data processing ability of the cloud computing.The proposed SOC can provide the real-time management of distribution,virtualization and service transparency for network security devices and ensure the security,reliability,and low risk for the network.Comparing with the traditional security operations center,the experiment results indicate that the model can get much higher performance in data processing ability,security,high availability,etc.
出处
《电子技术(上海)》
2011年第12期8-10,7,共4页
Electronic Technology
基金
国家973项目(No.2007CB311203)
国家自然科学基金(No.60803157
90812001)
山东省自然科学基金项目(No.ZR2009GM009)
国家标准制定计划(No.20080200-T-339)
国家质检公益性科研专项(No.10-126)
关键词
云计算
安全管理平台
事件关联分析
网络安全
cloud computing
security operations center
alert correlation analysis
network security