Abstract:As information technology continues to evolve, cloud data centres have become increasingly prominent as the preferred infrastructure for data storage and processing. However, this shift has introduced a new array of security challenges, necessitating innovative approaches distinct from traditional network security architectures. In response, the Zero Trust Architecture (ZTA) has emerged as a promising solution, with micro-segmentation identified as a crucial component for enabling continuous auditing and stringent security controls. VxLAN technology is widely utilized in data centres for tenant isolation and virtual machine interconnection within tenant environments. Despite its prevalent use, limited research has focused on its application in micro-segmentation scenarios. To address this gap, we propose a method that leverages VLAN and VxLAN many-to-one mapping, requiring that all internal data centre traffic routes through the VxLAN gateway. This method can be implemented cost-effectively, without necessitating business modifications or causing service disruptions, thereby overcoming the challenges associated with micro-segmentation deployment. Importantly, this approach is based on standard public protocols, making it independent of specific product brands and enabling a network-centric framework that avoids software compatibility issues. To assess the effectiveness of our micro-segmentation approach, we provide a comprehensive evaluation that includes network aggregation and traffic visualization. Building on the implementation of micro-segmentation, we also introduce an enhanced asset behaviour algorithm. This algorithm constructs behavioural profiles based on the historical traffic of internal network assets, enabling the rapid identification of abnormal behaviours and facilitating timely defensive actions. Empirical results demonstrate that our algorithm is highly effective in detecting anomalous behaviour in intranet assets, making it a powerful tool for enhancing security in cloud data centres. In summary, the proposed approach offers a robust and efficient solution to the challenges of micro-segmentation in cloud data centres, contributing to the advancement of secure and reliable cloud infrastructure.

Multilateral Security Architecture for Virtualization Platform in Multi-Tenancy Cloud Environment

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Trust Model to Enhance Security and Interoperability of Cloud Environment

Collaborative Network Security in Multi-Tenant Data Center for Cloud Computing

MTS: Bringing Multi-Tenancy to Virtual Networking

VIRTUALIZATION SECURITY: A GATEWAY TO SECURE CLOUD COMPUTING

Affinity and Conflict-Aware Placement of Virtual Machines in Heterogeneous Data Centers.

Poster: Lbms: Load Balancing Based On Multilateral Security In Cloud

Tualatin: Towards Network Security Service Provision in Cloud Datacenters

Secure Multi-Cloud Virtual Network Embedding

SeVMM: VMM-Based Security Control Model

An Access Control Policy for Multi-tenancy Cloud Storage Platform

Trusted Computing Base Using Virtualization Platform

RESEARCH ON DISTRIBUTED VIRTUAL NETWORK ISOLATION IN MULTI-TENANT CLOUD-COMPUTING NETWORK

Review on Co-residency Security Issues of Virtual Machines in Cloud Computing

A Micro-Segmentation Method Based on VLAN-VxLAN Mapping Technology

Emerging Security Challenges of Cloud Virtual Infrastructure

A Secure Virtual Machine Deployment Strategy to Reduce Co-residency in Cloud

Hierarchal Security Architecture of Virtualized Trusted Platform

Toward security as a service: A trusted cloud service architecture with policy customization