Research on Data Security Mechanism among Cloud Services based on Software Define Network
Wenbin Zhao, Fan Tongrang, Hongsheng Wang · International Journal of Security and Its Applications · 2017
In cloud services, users' data and applications are stored in remote cloud servers, their safety and security can be guaranteed by their cloud servers, but it is difficult for guarantee their security in interaction among them.As software defined network arise, its architecture realizes the separation between control plane and data plane, provide a promising way of dealing with privacy leakage of cloud data.This paper study a data security mechanism among cloud service based on software define network architecture, which maintains security policy on SDN controller cluster, which controls forwarding based on the mapping between physical network and logic network.This mechanism contains data service provider, data service user and privacy service provider.Data service provider customizes data attribute restriction based on data security protection requirements.Privacy service provider which is realized based on SDN controller, is responsible for the security of data interacting between data service user and data service provider, such as identity authentication, source data partition and data block recovering in accordance with data attribute restriction.Data service provider stores source data on cloud server.Through experiments and analysis, this data security mechanism is effective and feasible.