基于SRv6服务链的云网专线场景安全防护方法

Security Protection Method of Cloud Network Special Line Scenarios Based on SRv6 Service Chain

云网融合背景下,专线场景服务安全性与可靠性受到威胁,为此提出一种基于SRv6服务链的云网专线场景安全防护方法。从数据、语音、互联网入手,明确云网专线场景业务特征,在云网网络结构中引入SRv6服务链,实现节点逐级跳跃,提升网络资源转换效率;分析云网专线场景安全需求,将云网专线场景安全防护分为上传数据与下载文件2个阶段,计算网络流量限值函数和约束条件,在共享连接防护机制前提下创建数据共享密钥,一致化处理数据共享种子,完成云网专线场景安全防护目标。实验结果表明,该方法可敏锐感知异常攻击行为,安全防护速度快,具有极强的鲁棒性。

Under the background of cloud network convergence,the security and reliability of dedicated line scenarios are threat⁃ened.Therefore,this paper proposes a security protection method for dedicated line scenarios in cloud network based on SRv6 service chain technology.Starting from data,voice and the Internet,we should clarify the business characteristics of the cloud network dedicated line scenario,introduce SRv6 service chain technology into the cloud network structure,achieve node level by level jump,and improve the efficiency of network resource conversion;Analyze the security requirements of cloud network dedicated line scenarios,divide the security protection of cloud network dedicated line scenarios into two stages:uploading data and downloading files,calculate network traffic limit functions and constraints,create data sharing keys under the premise of shared connection protection mechanism,uniformly process data sharing seeds,and complete the security protection goals of cloud network dedicated line scenarios.The experimental results show that the proposed method can sensitively perceive abnor⁃mal attack behavior,and has fast security protection speed and strong robustness.