Modern cloud computing platforms based on virtual machine monitors (VMMs) host a variety of complex businesses which present many network security vulnerabilities. In order to protect network security for these businesses in cloud computing, nowadays, a number of middleboxes are deployed at front-end of cloud computing or parts of middleboxes are deployed in cloud computing. However, the former is leading to high cost and management complexity, and also lacking of network security protection between virtual machines while the latter does not effectively prevent network attacks from external traffic. To address the above-mentioned challenges, we introduce a novel customized network security for cloud service (CNS), which not only prevents attacks from external and internal traffic to ensure network security of services in cloud computing, but also affords customized network security service for cloud users. CNS is implemented by modifying the Xen hypervisor and proved by various experiments which showing the proposed solution can be directly applied to the extensive practical promotion in cloud computing.

中文翻译：

---

云服务定制化网络安全

基于虚拟机监视器 (VMM) 的现代云计算平台承载着各种复杂的业务，这些业务存在许多网络安全漏洞。为了在云计算中保护这些业务的网络安全，如今在云计算前端部署了大量的中间盒或者部分中间盒部署在云计算中。但是前者成本高、管理复杂，虚拟机之间也缺乏网络安全保护，而后者不能有效防止来自外部流量的网络攻击。针对上述挑战，我们引入了一种新颖的云服务定制网络安全（CNS），它不仅可以防止来自外部和内部流量的攻击，以确保云计算服务的网络安全，同时也为云用户提供定制化的网络安全服务。CNS 是通过修改 Xen hypervisor 实现的，并通过各种实验证明，表明所提出的解决方案可以直接应用于云计算的广泛实际推广。