NetFPGA平台應用於新一代跨雲端運算之研究-子計畫四：NetFPGA平台應用於新一代跨雲端運算之安全管理機制研究;On the Research of Netfpga Based Security Management Mechanisms for Future Inter-Cloud Computing Systems

NCU Institutional Repository > 資訊電機學院 > 資訊工程學系 > 研究計畫 > Item 987654321/49607

請使用永久網址來引用或連結此文件: http://ir.lib.ncu.edu.tw/handle/987654321/49607

題名:	NetFPGA平台應用於新一代跨雲端運算之研究-子計畫四：NetFPGA平台應用於新一代跨雲端運算之安全管理機制研究;On the Research of Netfpga Based Security Management Mechanisms for Future Inter-Cloud Computing Systems
作者:	曾黎明;許富皓;陳奕明
貢獻者:	資訊工程系
關鍵詞:	跨雲端運算;安全管理;NetFPGA;安全政策;研究領域：資訊科學--軟體
日期:	2011-08-01
上傳時間:	2012-01-17 19:05:46 (UTC+8)
出版者:	行政院國家科學委員會
摘要:	近年來雖然雲端運算受到極大注目且其應用有日益普及趨勢，但是對於重視安全的企業而言，為了符合法規或為了安全風險控管考量，往往只會將一部份資訊工作交給雲端（公眾雲），而保留核心部分在企業內部（私有雲），因此跨雲端的運算需求將愈來愈普遍。目前跨雲端的安全管理大多仰賴雲端服務供應商提供的解決方案，但是這些方案未必能完全滿足企業客戶所需的下列的功能需求：(1)無論運算在公有雲或私有雲，都必須要符合相同的資訊安全政策；(2)一旦公司的安全改變，相應的安全管理機制必須能配合調整；(3)企業客戶必須能直接且集中控制這些安全機制的運作；(4)必須能確保雲內以及跨雲之間的封包流通和別的雲端客戶完全隔離。由此可見，對於雲端應用的普及和實際應用而言，跨雲端運算的安全管理是一項非常重要的研究議題。本計畫為整合型計畫『NetFPGA平台應用於新一代跨雲端運算之研究』下的子計畫。本子計畫的研究目的有三：(1) 研發一組可以滿足上述跨雲端安全管理需求的機制和相關技術、演算法；(2) 為滿足跨雲端間高速通信的需求並延續本研究團隊在前一期NetFPGA研究計畫的成果和經驗，我們將以修改open-flow switch的架構，利用iBF(In-packet Bloom Filter)來達到路徑隱藏與資訊隔離功能同時以分散式Erasure Code為理論基礎開發分散式安全儲存系統來實現上述這些安全機制；(3)和其他子計畫配合，利用iGENI的測試平台，實際上線測試這些安全機制的可行性和效能。本計畫將分三年執行。第一年著重在跨雲端運算安全管理機制的設計和模組的開發。第二年著重在NetFPGA的實現與單元測試。第三年將和其他子計畫密切配合在iGENI平台上進行各種測試。在各階段獲得的初步成果，也將整理成論文發表。Recently cloud computing has attracted much attention from the public and cloud-based applications become more and more popular. However, for legal concern and risk control, enterprises that value security usually only hand over part of their work to a public cloud and use their private cloud to handle their key work. Hence, demands for cross-cloud computing become more and more popular. Currently, solutions of security management of cross-cloud computing are mainly provided by the cloud computing service providers. However, these solutions may not satisfy the following requirements that enterprises need. First, both a public cloud and a private cloud must adopt the same security policy. Second, once a company changes her security policy, the clouds must make the corresponding management adjustment. Third, a company must be able to directly control the cloud security mechanism in a centralized way. Fourth, packets belongs to a company should not travel through the clouds used by a different company. As a result, for the popularity and feasibility of cloud computing, security management of cross-cloud computing becomes a critical issue. This project is a subproject of the integrated project---“On the Research of NetFPGA Based Security Management Mechanisms for Future Inter-Cloud Computing System”. This project tries to achieve the following three goals. First, develop some algorithms, techniques, and mechanisms that can satisfy the requirements that cross-cloud computing management needs. Second, to satisfy the high-speed communication requirement of cross-cloud computing and to continue the research result of our team in our previous NetFPGA project, we will modify the structure of open-flow switch, using iBF (In-packet Bloom Filter) to achieve both of the path hidden and the information isolation that are based on the theory of Erasure Code Distributed Storage System to achieve the safety of these security mechanisms. We plan to finish this project in three years. In the first year, we will design solutions for Inter-Cloud computing and develop related modules. In the second year, we will implement our method in a NetFPGA card and make related tests. In the third year, we will work with other team to make various tests on an iGENT platform. Research results of the above phase will be published on papers. 研究期間：10008 ~ 10107
關聯:	財團法人國家實驗研究院科技政策研究與資訊中心
顯示於類別:	[資訊工程學系] 研究計畫

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
index.html		0Kb	HTML	472	檢視/開啟

在NCUIR中所有的資料項目都受到原著作權保護.

社群 sharing

資料載入中.....