基于虚拟化安全网络扩展的SDN安全架构

SDN Security Architecture Based on Virtualized Security Networks

采用控制、转发分离架构的软件定义网络(SDN)为网络的可编程性与开放性提供极大便利,但也给网络的安全性带来诸多挑战。提出一种虚拟安全网络(Virtualized Security Networks)与数据层中间盒扩展相结合的SDN安全架构,给出该架构的实现要点,并以实验验证其架构实现。测试表明该架构较其他方式具有更好的性能与可扩展性,同时其更有利于传统网络环境下的安全保障机制面向SDN网络架构的过渡迁徙。

Software Defined Networking is in its fast growth in the past years. Its software programmable architecture and openness brings many of new security challenges. Proposes a novel SDS security architecture based on Virtuallzed Security Networks. Discusses the critical fea-tures and use cases of VSN security model in detail, and also verificates its implementation by testing. The analysis shows that the VSN security architecture has better performance and scalabilities with compared with other security models.