安全监控虚拟云安全网络架构研究

Research on a Framework Based on Virtual Cloud Network for Monitoring Safe Production

安全云(Security as a Service) 以云计算和云网络为基础,安全能力池化将能有效支撑规模化的网络控制。智能安全监控专网的规模和服务扩展需要解决专网和公网的有效融合、合理的划分安全边界以及异构数据安全共享等难题,安全云具有分布式、按需分配、即插即用、海量支撑等优势,将为建设智能安全监控专网提供很好的参考架构。文章针对安全生产应急救援信息化建设的现状,首先分析了可信网络、SDN安全、区块链以及态势感知与监控专网的可行性关系以及推广适用的潜在问题。然后提出一种新的安全监控虚拟云安全网络架构,定义智能安全监控专网的安全云服务模型CMRP(Control, Monitor, Response and Protection)。构建基于灰色隧道的动态可扩展虚拟私有云,为智能安全监控专网的延伸和扩容提供安全防护,形成安全的虚拟边界。利用区块链技术,实现异构数据的有效安全传输加密。最后通过实例测试,验证新架构能够保证智能安全监控专网的攻击成功检测率能够保持在90%以上,且不依赖于前期攻击特征的学习,提升了安全接入和数据传输性能。

Based on cloud computing and network, SaS（Security as a Service）has provided with a cloud security abHity for network control. Smart security monitoring private network has to expand the scale of services for solving the fuse o f network,safe security bound and the share of data. As cloud network with distributed,on demand,plug and play,and massive support and other advantages,it provides a good reference for the construction of smart security monitoring network architectare.According to the cuixent construction of emergenc}^ rescue information safety, we first anatyzes the trusted net／￥〇 rk？ SDN security, block link and situation awareness. Then a new framework based on virtual cloud network for monitoring safe production is proposed The model of service security cloud is defined Grey tunnel and block chain are exploited to construct virtual private cloud to improve security.The simulations in OPNET verify that the new architecture can guarantee the successful attack detection rate of inteUigent security monitoring network can be maintained at more than 90°/〇5 without depending on the learning of former attack features. Those can ensure the perforaiance enhancement of data access and data transmission.