发明名称 |
ELASTIC ENFORCEMENT LAYER FOR CLOUD SECURITY USING SDN |
摘要 |
An efficient elastic enforcement layer (EEL) for realizing security policies is deployed in a cloud computing environment based on a split architecture framework. The split architecture network includes a controller coupled to switches. When the controller receives a packet originating from a source VM, it extracts an application identifier from the received packet that identifies an application running on the source VM. Based on the application identifier, the controller determines a chain of middlebox types. The controller further determines middlebox instances based on current availability of resources. The controller then adds a set of rules to the switches to cause the switches to forward the packet toward the destination VM via the middlebox instances. |
申请公布号 |
WO2013186712(A1) |
申请公布日期 |
2013.12.19 |
申请号 |
WO2013IB54794 |
申请日期 |
2013.06.11 |
申请人 |
TELEFONAKTIEBOLAGET L M ERICSSON (PUBL);KOOREVAAR, TOMMY;POURZANDI, MAKAN;ZHANG, YING |
发明人 |
KOOREVAAR, TOMMY;POURZANDI, MAKAN;ZHANG, YING |
分类号 |
G06F9/455;G06F21/53;H04L29/06 |
主分类号 |
G06F9/455 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|