企业数据中心网络虚拟化环境中边界感知安全技术和应用

摘要

由于企业数据中心处理并保存着大量的信息,数据中心的安全至关重要,其中网络安全是关键环节之一.数据中心网络虚拟化使得网络边界深入至宿主服务器内部,网络安全设备需要感知这些边界才能进行有效监控.对现有的网络虚拟化边界感知安全技术进行分类研究,探讨各类技术的原理、优势、不足及应用,并且展望了数据中心网络虚拟化技术及边界感知安全技术的发展趋势.%Since enormous data are processed and stored in enterprise data center, the security of data center is very important. One of the key issues is network security. The network virtualization of enterprise data center makes the network boundaries extend into host servers. The boundary information is requisite for network security devices to work. The paper studies and classifies the present network virtualization boundary-aware security technologies,discusses the principles, advantages, shortcomings and applications of each type of technology. Further, the future trends of data center network virtualization technologies and boundary-aware technologies are forecasted.