信息服务的模型与机理研究-cloud-coffre-fort.pptVIP

* * SDN based Network Security Monitoring in Dynamic Cloud Networks Xiuzhen CHEN School of Information Security Engineering Shanghai Jiao Tong University, Shanghai, China Report in Telecom ParisTech, Paris * Content Background Characteristics of Cloud Network Challenges we meet Architecture of Cloud Security Monitor Analysis of concrete scenario * * Background Cloud computing has become a popular paradigm. * Cloud computing is the third evolution of information technology after micro-computer and Internet. Background Many recent new services are based on cloud environment. computing Storage Web Music Cloud Hosting …… * More and more people are using cloud networks. Many diverse hosts and network configurations coexist in a cloud network. It is essential to protect cloud networks from threats!! Content Background Characteristics of Cloud Network Challenges we meet Architecture of Cloud Security Monitor Analysis of concrete scenario * * Characteristics of Cloud Network Large-scale environment Consisting of many physical hosts and virtual machines. Amazon EC2 Cloud runs at least half million physical hosts. Amazon EC2 Cloud operates almost five millions virtual machines assuming each host serves on average ten virtual machines. * Quite complicated configuration Large number of diverse, networked physical/virtual machines. Large number of diverse cloud consumers/tenants who may require very different networking configurations. Characteristics of Cloud Network * Quite dynamic On-demand service. More VMs would run for a service massively required. Virtual machines in a physical host can be dynamically invoked or removed, even be migrated to other physical hosts. Content Background Characteristics of Cloud Network Challenges we meet Architecture of Cloud Security Monitor Analysis of concrete scenario * * Challenges Is it easy or simple to apply current network security devices (firewalls, NIDS) to a cloud network environment? * How to provide a network security moni