适用于自适应网络防御的联合云计算框架

A Federated Cloud Computing Framework for Adaptive Network Defense

为了解决云计算中网络安全防御策略部署问题,提出一种适用于自适应网络防御的联合云计算框架.该框架由治理层和互操作层组成,使用LocalHub,StateHub和FederalHub共3个集线器将独立的管理层连接起来,能够根据云计算中不同事件来计算和部署网络防御策略,满足部署网络防御解决方案和分布式计算所需的标准和复杂服务.文中给出联合云计算系统模型及其构建单元,以及所提模型的好处和实施带来的一些挑战.该云计算联合框架解决了终端用户存在的问题.实验表明:当事件响应中涉及更高级别的联合框架时,对应的延迟变高,事件响应成功的概率增大.在本文联合云计算框架中网络防御的性能优于其他2种云计算框架.

In order to solve the problem of network security defense strategy deployment in cloud computing,an integrated cloud computing framework for adaptive network defense has been proposed.The framework consists of the governance layer and the interoperability layer,using the LocalHub,StateHub,and FederalHub three hubs to connect the independent management layer to compute and to deploy network defense strategies based on different events in cloud computing,which meet the needs and complex services needed for deploying network defense solutions and distributed computing.In this paper,the integrated cloud computing system model and its building blocks have been presented,as well as the benefits and implementation challenges of the proposed model.With the cloud computing integrated framework,the problems of end users have been solved.Experiments show that when a higher-level joint framework is involved in the event response,the corresponding delay becomes higher and the probability of successful event response increases.Besides,in the federated cloud computing framework,the performance of network defense is better than that of the other two cloud computing frameworks.