Construction of Data Center Security System Based on Micro Isolation under Zero Trust Architecture
Lin Ni, Huanqing Cui, Mingqian Wang, Depeng Zhi, Kun Han, Wangli Kou · 2022 2nd Asia-Pacific Conference on Communications Technology and Computer Science (ACCTCS) · 2022
With the development of Internet technology, the rapid growth of data volume strongly promotes the construction of data centers, which also makes the security threats to data centers more and more serious. The architecture of the internal network of the data center has changed from the traditional IT architecture to virtualization, hybrid cloud and containerization, and the security isolation inside the data center has become more and more difficult. Aiming at the isolation of the internal network of the data center, the paper builds a more reliable system with the help of the zero-trust thought. On the basis of analyzing the key technologies of micro-isolation and constructing a micro-isolation system, we design a zero-trust security architecture based on micro-isolation propose a zero-trust security system for data center based on micro-isolation, and provides a set of security isolation scheme for the internal network of the data center.