云数据中心网络纵深防御探讨

Discussion on deep defense of cloud data center network

近年来,云数据中心的运行安全问题遇到了一定的挑战。文章基于云数据中心网络安全服务需求,介绍分析了信息保障技术框架纵深防御,针对IATF纵深防御模型存在的不足,明确改进思路,借鉴纵深防御模型提出了主动型纵深防御模型的建设框架,并立足于网络假设、网络威胁、网络纵深防御架构、网络纵深防御技术架构4个维度,制订出网络纵深防御架构的设计方案,最后从合理性、实用性和先进性3个方面做出总结,明确云数据中心网络纵深防御具有实用价值,可以为云数据中心安全防护工作提供参考。

In recent years,the running security of cloud data center has met some challenges.Based on the requirement of network security service in cloud data center,this paper introduces and analyzes the defense-in-depth of information assurance technology framework,based on the deep defense model,this paper proposes a framework of active deep defense model,which is composed of four dimensions:network hypothesis,network threat,network deep defense architecture,and network deep defense technology architecture,the design scheme of network defense in depth is worked out,and the rationality,practicability and advancement of network defense in cloud data center are summarized at last,which shows that network defense in depth in cloud data center has practical value,it can provide reference for cloud data center security protection.