By endowing network with the ability of reliable scheduling of security resources, it can realize the dynamic deployment of security resources as well as the efficient configuration of protection resources, and further can quickly respond to network security threats and emergencies timely. Furthermore, due to the network is increasingly complex, it is of great importance to make it reliable by invoking appropriate security resources. However, the security mechanism and response speed of traditional network based on security domain division, network boundary protection are hard to meet the requirements of the virtual network. In this paper, we propose the SDN-empowered reliable and dynamic scheduling scheme for security resources. In the scheme, we use network security resource virtualization technology to virtualize and modularize network security software and hardware resources; at the SDN control layer, we propose meta-security function combination technology to provide on-demand customization for various security applications’ security service; by using role-based conflict detection and conflict resolution technology, we can detect and handle security rule conflicts. The experiments show that the scheme is reliable and efficient with low latency and great throughput.

中文翻译：

---

SDN赋能的安全资源可靠动态调度方案

通过赋予网络安全资源可靠调度的能力，可以实现安全资源的动态部署和防护资源的高效配置，进而能够及时快速响应网络安全威胁和突发事件。此外，由于网络日益复杂，通过调用适当的安全资源使其可靠变得非常重要。然而，基于安全域划分、网络边界保护的传统网络的安全机制和响应速度难以满足虚拟网络的要求。在本文中，我们提出了基于 SDN 的安全资源可靠动态调度方案。在方案中，我们利用网络安全资源虚拟化技术，对网络安全软硬件资源进行虚拟化和模块化；在SDN控制层，我们提出元安全功能组合技术，为各种安全应用的安全服务提供按需定制；通过使用基于角色的冲突检测和冲突解决技术，我们可以检测和处理安全规则冲突。实验表明，该方案可靠高效，延迟低，吞吐量大。我们可以检测和处理安全规则冲突。实验表明，该方案可靠高效，延迟低，吞吐量大。我们可以检测和处理安全规则冲突。实验表明，该方案可靠高效，延迟低，吞吐量大。