Abstract:A data center is an infrastructure that supports Internet service. Cloud computing is rapidly changing the face of the Internet service infrastructure, enabling even small organizations to quickly build Web and mobile applications for millions of users by taking advantage of the scale and flexibility of shared physical infrastructures provided by cloud computing. In this scenario, multiple tenants save their data and applications in shared data centers, blurring the network boundaries between each tenant in the cloud. In addition, different tenants have different security requirements, while different security policies are necessary for different tenants. Network virtualization is used to meet a diverse set of tenant-specific requirements with the underlying physical network, enabling multi-tenant datacenters to automatically address a large and diverse set of tenants requirements. In this paper, we propose the system implementation of vCNSMS, a collaborative network security prototype system used in a multi-tenant data center. We demonstrate vCNSMS with a centralized collaborative scheme and deep packet inspection with an open source UTM system. A security level based protection policy is proposed for simplifying the security rule management for vCNSMS. Different security levels have different packet inspection schemes and are enforced with different security plugins. A smart packet verdict scheme is also integrated into vCNSMS for intelligence flow processing to protect from possible network attacks inside a data center network.

Collaborative network security in multi-tenant data center for cloud computing

Collaborative Network Security in Multi-Tenant Data Center for Cloud Computing

Tualatin: Towards Network Security Service Provision in Cloud Datacenters

Survey on Data Center Network for Cloud Computing

A Survey on Data Center Networking for Cloud Computing.

Multilateral Security Architecture for Virtualization Platform in Multi-Tenancy Cloud Environment

Rethinking the Data Center Networking: Architecture, Network Protocols, and Resource Sharing

Joint Physical-Layer Attributes-Based Authentication and Authorization Mechanism for Green Cloud Data Centers

CloudSEC: A Cloud Architecture for Composing Collaborative Security Services

Ensure Data Security in Cloud Storage

Networklet: Concept and Deployment.

Modeling and Deploying Networklet.

RESEARCH ON DISTRIBUTED VIRTUAL NETWORK ISOLATION IN MULTI-TENANT CLOUD-COMPUTING NETWORK

Modeling and Deploying Hybrid Tenant Requests with Shared Networklets

Achieving Secure and Efficient Data Collaboration in Cloud Computing

Towards Data Isolation & Collaboration in Storage Cloud.

A Virtual Host Protection System Applying to Cloud Computing Center

Tenant-Oriented Monitoring For Customized Security Services In The Cloud

SECO: Secure and Scalable Data Collaboration Services in Cloud Computing

Profiling-as-a-Service in Multi-tenant Cloud Computing Environments

Mulcnet: Network Management Cloud