ZTE

ZTE Communications ›› 2018, Vol. 16 ›› Issue (4): 9-14.DOI: 10.19729/j.cnki.1673-5188.2018.04.003

• Special Topic • Previous Articles     Next Articles

SDN Based Security Services

ZHANG Yunyong, XU Lei, TAO Ye   

  1. China Unicom, Beijing 100032, China
  • Received:2018-07-01 Online:2018-07-01 Published:2018-10-25
  • About author:ZHANG Yunyong (zhangyy@chiaunicom.cn) serves as President of China Unicom Research Institute, Vice President of the Ministry of Industry and Information Technology SDN Industry Alliance, China, Vice President of the Technical Committee for New Prominent Forum in China Institute of Telecommunications. He is also a professor-level senior engineer, outstanding member of China Computer Federation, member of the 13th National Committee of CPPCC, national candidate for the Project of Millions of Talents. He was awarded the State Department Special Allowance and the title of “China’s Middle-aged and Young Experts with Outstanding Contributions”. He has achieved 64 authorized patents and 37 software copyrights.|XU Lei (xulei56@chinaunicom.cn) is a manager of cloud computing with China Unicom Research Institute. His research interests include cloud computing, SDN/NFV, and information security. He has achieved 20 authorized patents and 20 software copyrights. He is an editor of very first worldwide ITU cloud computing standards.|TAO Ye (taoy10@chinaunicom.cn) is the director of the Cloud Security Research Group of China Unicom Research Institute. His research interests include information security, network security, SDN/NFV security, and anti-telecom fraud. He has achieved 10 authorized patents and 10 software copyrights. He is the chief-editor of 2 published ITU standards.

RichHTML

PDF

Abstract:

With the development and revolution of network in recent years, the scale and complexity of network have become big issues. Traditional hardware based network security solution has shown some significant disadvantages in cloud computing based Internet data centers (IDC), such as high cost and lack of flexibility. With the implementation of software defined networking (SDN), network security solution could be more flexible and efficient, such as SDN based firewall service and SDN based DDoS-attack mitigation service. Moreover, combined with cloud computing and SDN technology, network security services could be lighter-weighted, more flexible, and on-demanded. This paper analyzes some typical SDN based network security services, and provide a research on SDN based cloud security service (network security service pool) and its implementation in IDCs.

Key words: SDN, network security, cloud security service