基于SDN的防火墙主动防御系统设计

Design of firewall active defense system based on SDN

随着计算机技术的发展,很多企业都引进了云计算技术,企业在享受云计算带来便利的同时,一系列网络安全问题也逐步显现。因此,加强云计算数据中心的安全防护,是目前网络信息安全领域研究的重要。文章从企业实际需求出发,以云计算数据中心安全防护为目的,结合SDN技术数据平面与控制平面解耦优势,架构了一种云计算数据中心安全防护系统,解决了传统防火墙抵御未知漏洞攻击的缺陷,实现了通过异构的形式对未知漏洞攻击的拟态防御,有效提升了网络信息防护机能。文章的研究具有一定现实意义,为网络安全研究提供了借鉴。

With the development of computer technology,many enterprises have introduced cloud computing technology.While enterprises enjoy the convenience brought by cloud computing,a series of network security problems have gradually emerged.Therefore,strengthening the security protection of cloud computing data centers is an important research issue in the field of network information security.Starting from the actual needs of enterprises,aiming at the security protection of cloud computing data centers,and combining the advantages of SDN technology data plane and control plane decoupling,this paper constructs a cloud computing data center security protection system,which solves the problem of traditional firewalls against unknown vulnerability attacks.Defects,it realizes the mimetic defense against unknown vulnerability attacks in a heterogeneous form,and effectively improves the network information protection function.The research of this paper has certain practical significance and provides reference for network security research.