KR20180071480A - Cloud data center operating system for per-tenant security service in cloud computing, and operation method for the same - Google Patents

Abstract

Disclosed are a cloud data center control system for providing a security service for each tenant in a cloud data center using virtualization technology and an operating method thereof. The cloud data center control system includes: a tenant security module configuration determining unit for determining a security module added to a tenant and an installation position of the security module; a tenant monitoring module configuration determining unit for determining a monitoring module added to the tenant and an installation position of the monitoring module; and a tenant policy determining unit for determining a policy to be used for the security module or the monitoring module. Accordingly, the present invention can provide an optimized security service for each tenant.

Description

Technical Field [0001] The present invention relates to a cloud data center control system for a tenant security service in cloud computing, and a cloud data center control system for operating the cloud data center,

The present invention relates to a cloud data center using a virtualization technology, and more particularly, to a cloud data center for providing a customized security service for each tenant in a cloud center using virtualization technology. Structure and method of operation thereof.

Unlike traditional data centers, cloud centers using virtualization technology are providing infrastructure services that allow multiple users to rent and instantly use their virtual resources (virtual servers, virtual networks, virtual storage, etc.). In this way, the dedicated infrastructure leased by each user is referred to as tenant. Accordingly, a plurality of tenants may exist simultaneously in one cloud center.

In this environment, each tenant shares a physical infrastructure and uses an independent virtual infrastructure through virtualization technology. In some cases, the same server or network device is used by another tenant, and the tenant is operated separately by a hypervisor or a virtual network technology. The cloud center includes the Cloud Center control system for effective management of these devices and tenants. Typical Cloud OSes include Openstack and CloudStack.

The existing cloud center security services can be implemented by sharing the security devices among several tenants, such as installing the integrated security devices (FW, IPS, etc.) at the gateway location, or by providing only basic security functions for each tenant, (FWaaS) to install or lease the security features are installed and operated.

However, there are limitations in providing security services that are appropriate for each tenant by changing the policy for each tenant or by analyzing security threats by tenants, sharing the integrated security device in a situation where the security threat of the Internet is increasing. , There is a need for a system, method, and procedure for enhancing security services or enhancing security monitoring for each tenant, depending on the situation.

In order to solve the above problems, an object of the present invention is to provide a configuration of a data center control system for providing a security service for each tenant in a cloud data center using virtualization technology.

Another object of the present invention is to provide a method of operating a data center control system for providing a security service for each tenant in a cloud data center using virtualization technology.

Another object of the present invention is to provide a data center control system for providing security service for each tenant in a cloud data center using virtualization technology.

According to an aspect of the present invention, there is provided a cloud data center control system for providing a security service for each tenant in a cloud data center using a virtualization technology. The cloud data center control system includes a security module added to the tenant, A tenant security module configuration determining unit for determining the tenant security module; A tenant monitoring module configuration determining unit for determining a monitoring module added to the tenant and an installation location of the monitoring module; And a tenant policy determination unit for determining a policy to be used for the security module or the monitoring module.

Here, the cloud data center control system further includes a security monitoring and analyzing unit for performing security related monitoring and analysis and providing security-related information for each tenant, and the tenant security module configuration determining unit may include a security monitoring and analyzing unit, The security module added to the tenant and the installation location of the security module based on the provided security-related information for each tenant.

Here, the cloud data center control system may include a security module determined by the tenant security module configuration determination unit or a tenant configuration application unit that applies the monitoring module determined by the tenant monitoring module configuration determination unit to a virtual infrastructure defined for the tenant May be further included.

Here, the cloud data center control system may further include a tenant security policy application unit that applies a common security policy commonly applied to tenants. At this time, the common security policy may be a firewall rule.

Here, the security module may be a module that performs at least one of FW (Firewall), IPS (Intrusion Prevention System), IDS (Intrusion Detection System), and UTM (Unified Threat Management)

Here, the monitoring module may be a flow monitoring module.

Here, the security module may be located between virtual machines constituting the tenant or in front of a virtual machine constituting the tenant. In addition, the security module may be configured to replace the basic security function provided in the tenant.

Here, the security module or the monitoring module may be driven by using a separate virtual machine on the tenant or may be additionally installed and operated in a virtual machine existing in the tenant.

Another object of the present invention is to provide a security service for each tenant in a cloud data center using a virtualization technology. The security service includes a security module to be added to the tenant based on security- And determining an installation location of the security module; Determining installation positions of the monitoring module and the monitoring module added to the tenant based on security-related information about the tenant; And determining a policy to be used for the security module or the monitoring module. The method of providing a security service for each tenant in a cloud data center is provided.

Here, the security service providing method for each tenant may further include monitoring and analyzing security related information to collect security-related information for each tenant.

The security service providing method according to the present invention may further include applying the determined security module or the monitoring module to a virtual infrastructure defined for the tenant.

The security module may be a module that performs at least one of FW (Firewall), IPS (Intrusion Prevention System), IDS (Intrusion Detection System), and UTM (Unified Threat Management)

The monitoring module may be a flow monitoring module.

Here, the security module may be located between virtual machines constituting the tenant or in front of a virtual machine constituting the tenant. In addition, the security module may be configured to replace the basic security function provided in the tenant.

Here, the security module or the monitoring module may be driven by using a separate virtual machine on the tenant or may be additionally installed and operated in a virtual machine existing in the tenant.

Another object of the present invention is to provide a cloud data center control system for providing a security service for each tenant in a cloud data center using virtualization technology. The cloud data center control system includes a memory device storing program codes, The program code comprising: determining a security module to be added to the tenant and an installation location of the security module based on security-related information for the tenant; Determining installation positions of the monitoring module and the monitoring module added to the tenant based on security-related information about the tenant; And determining a policy to be used for the security module or the monitoring module.

Here, the security module may be a module that performs at least one of FW (Firewall), IPS (Intrusion Prevention System), IDS (Intrusion Detection System), and UTM (Unified Threat Management)

Here, the security module or the monitoring module may be driven by using a separate virtual machine on the tenant or may be additionally installed and operated in a virtual machine existing in the tenant.

The cloud data center control system and the operation method according to the embodiment of the present invention as described above can provide an optimized security service for each tenant in the cloud data center.

In addition, when using the cloud data center control system and its operation method according to the embodiment of the present invention, since a security module or a monitoring module can be configured for each tenant instead of simply changing a security policy according to a security analysis result, New security module is easy to apply and various security functions can be used as needed. In addition, the level of security service can be automatically enforced / maintained / mitigated to suit the situation.

1 is a block diagram for explaining a configuration example of a tenant configuration of a virtualized cloud data center and a control system of a cloud data center.
2 is a conceptual diagram for explaining an aspect in which a security service differentiated according to an embodiment of the present invention is provided according to an embodiment of the present invention.
3 is a conceptual diagram for explaining another aspect in which a security service differentiated according to an embodiment of the present invention is provided according to an embodiment of the present invention.
4 is a conceptual diagram for explaining another embodiment in which a security service differentiated according to an embodiment of the present invention is provided according to an embodiment of the present invention.
FIG. 5 is a block diagram illustrating a configuration of a cloud data center control system according to an embodiment of the present invention. Referring to FIG.
6 is a block diagram illustrating an operation method of a cloud data center control system according to an embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. Like reference numerals are used for like elements in describing each drawing.

The terms first, second, A, B, etc. may be used to describe various elements, but the elements should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

Unlike traditional data centers, cloud data centers that use virtualization technology allow multiple users to lease their virtual resources (virtual servers, virtual networks, virtual storage, etc.) service. A dedicated virtual infrastructure that each user leases in the cloud data center is called a tenant. Thus, there can be multiple tenants at the same time in a cloud data center.

1 is a block diagram for explaining a configuration example of a tenant configuration of a virtualized cloud data center and a control system of a cloud data center.

Referring to Figure 1, each tenant 111, 112, 113 in the cloud data center 110 shares a physical infrastructure 114 that shares network resources with physical computing resources, As a virtual infrastructure.

In some cases, a tenant may use the same server or network device with another tenant, where the tenant is operated separately by a hypervisor or virtual network technology.

The cloud data center is also operated by a cloud operating system (OS) 120 to effectively manage these devices and tenants. Typical cloud data center control systems include Openstack and CloudStack.

Although only the necessary components of a cloud data center control system are shown in FIG. 1 to avoid obscuring the main features of the present invention, the actual cloud data center control system may include many additional components, It will be possible.

Meanwhile, the security service of the existing cloud data center is classified into a method in which a plurality of tenants share a security device such as installing the integrated security device 115 at a gateway location as shown in FIG. 1, (FW: FireWall) function, and the user installs or leases the security function (FWaaS) by using a method of installing and operating the security function (Openstack).

However, there are limitations in providing security services that are appropriate for each tenant by changing the policy for each tenant or by analyzing security threats by tenants, sharing the integrated security device in a situation where the security threat of the Internet is increasing. , There is a need for a system, method, and procedure for enhancing security services or enhancing security monitoring for each tenant, depending on the situation.

Users who receive cloud services can configure various resources and types of infrastructures, and may require various levels of security services depending on the type of infrastructure. In particular, the security service needs an automatic security enhancement function that automatically enhances the security service when an abnormality is detected in the initial installed security service situation. Accordingly, embodiments of the present invention provide a cloud data center control system configuration and an operation method thereof that can provide an optimal security service for each tenant.

The embodiments of the security service differentiated according to the tenants according to the embodiments of the present invention will be described with reference to the drawings.

FIGS. 2 to 4 are conceptual diagrams for explaining aspects in which a security service differentiated according to tenants is provided according to an embodiment of the present invention.

In the security services according to the tenants according to the embodiments of the present invention illustrated in FIG. 2 to FIG. 4, an additional module may be applied to enhance the security service in a situation where a basic security function is provided, Modules can be applied. Here, the additional module added for the security service may be a security function module or a security monitoring module.

Referring to FIG. 2, when there is a problem between the first virtual server 212 and the second virtual server 213 under the condition that only the basic security function 211 is provided, The security function 214 is additionally installed between virtual servers, or an additional monitoring module is simply installed for detailed security monitoring to enhance security monitoring. At this time, the additional module may be a security module that performs at least one of the functions of IPS (Intrusion Prevention System), IDS (Intrusion Detection System), and UTM (Unified Threat Management) (E.g., a flow monitoring module that monitors the flow between the devices).

Next, referring to FIG. 3, the tenant 2 220 transmits an additional module 223, which performs additional security functions, to the virtual server 222 (FIG. 3), determining that the security is not secured by the basic security function 221, ). At this time, the additional module may be a security module that performs at least one of IPS, IDS, and UTM, as mentioned above.

4, when the tenant 3 230 improves the basic security function and installs additional enhanced modules 234 and 235 in a plurality of virtual servers 231, 232, and 233 . At this time, the additional module may be a security module that performs at least one of IPS, IDS, and UTM, as mentioned above.

The additional modules illustrated in FIGS. 2 to 4 may be security modules (IPS, IDS, UTM, etc.) or monitoring modules (flow monitoring devices, etc.) for enhancing security monitoring for each tenant. 2 to 4, additional modules such as a security module or a monitoring module are illustrated as being driven in a separate virtual machine, but may additionally be mounted in a virtual server or an existing security module or device to be operated in the same virtual machine have.

In order to enable security service for each tenant as described above, an embodiment of the present invention proposes a cloud center control system.

FIG. 5 is a block diagram illustrating a configuration of a cloud data center control system according to an embodiment of the present invention. Referring to FIG.

5, the cloud data center control system 500 according to the present invention includes a tenant security module configuration determining unit 510, a tenant monitoring module configuration determining unit 520, and a tenant policy determining unit 530 Lt; / RTI >

Meanwhile, the cloud data center control system 500 according to the present invention may further include a tenant configuration application unit 540, a tenant security policy application unit 550, and a security monitoring and analysis unit 560 as additional components . The tenant configuration application unit 540, the tenant security policy application unit 550, and the security monitoring and analysis unit 560 may be implemented by the components having corresponding names of the cloud data center control system 120 illustrated in FIG. , But there may be differences in the detailed functions.

In addition, the cloud data center control system 500 according to the present invention may be configured such that the tenant security module configuration determining unit 510, the tenant monitoring module configuration determining unit 520, and the security module information 571 used by the tenant policy determining unit 530 ), Monitoring module information 572, and security module-specific policy information 573, which are stored in the information storage unit 570.

First, the tenant security module configuration determining unit 510 may determine the security module to be added to the tenant and determine the installation location of the security module when the security service adjustment is required according to the security analysis result. In order to operate the tenant security module configuration determining unit 510, the information 571 of available security modules is registered in advance in the information storage unit 570, So that the security module configuration determination unit 510 can determine the security module configuration. As described above, the security module that can determine use of the at least one of the Intrusion Prevention System (IPS), Intrusion Detection System (IDS), and Unified Threat Management (UTM) Function, and various security functions can be performed.

Next, the tenant monitoring module configuration determining unit 520 may play a role of determining the monitoring module to be installed and the installation location thereof when the security monitoring enhancement is required. In order to operate the tenant monitoring module configuration determining unit 520, the information 572 of the available monitoring modules is registered in advance in the information storage unit 570, So that the monitoring module configuration determining unit 520 can make the determination. Here, the monitoring module may be a flow monitoring module that monitors a flow between virtual servers constituting the tenant.

Next, the tenant policy decision unit 530 determines a policy to be used for the security analysis result and the security / monitoring module installed in the tenant based on the tenant security policy information, and generates a policy to be actually applied using the dynamic information It is the role of The information on the policy for each security module / monitoring module determined by the tenant policy decision unit 530 can be stored in the information storage unit 570 as the policy information 573 for each module.

As a further component, the tenant configuration application unit 540 is a component that actually applies the virtual infrastructure defined for the tenant, and information related to the virtual infrastructure is stored as tenant configuration information 574 in the information storage unit 570. The tenant configuration application unit 540 determines whether or not the security module determined by the tenant security module configuration determination unit 510 is installed or removed or the installation or removal of the monitoring module determined by the tenant monitoring module configuration determination unit 520, And will play a role that is actually applied to the virtual infrastructure. This corresponds to the function existing in the cloud center control system of FIG. 1, but there may actually be a detailed difference.

As a further component, the tenant security policy applying unit 550 is a component for applying each tenant or a common security policy, for example, a firewall rule, etc., and a policy necessary for the tenant security policy application unit 550 may include a tenant security policy information (575).

As a further component, the security monitoring and analysis unit 560 performs security related monitoring and analysis, and security related information is stored in the information storage unit 570 as tenant security information 576. [

Other functions may exist in an actual cloud control system, but in order not to obscure the present invention, portions not directly related to the present invention are omitted.

In the cloud data center control system according to an embodiment of the present invention, the security module and the monitoring module are separately displayed. However, the security module and the security monitoring function may be simultaneously provided in one module. In addition, when a security module or a monitoring module is additionally configured, the tenant configuration application unit 540 refers to the information about the security module or the monitoring module in the information storage unit 570 and transmits the security module or the monitoring module to the tenant's virtual infrastructure And the tenant security policy application unit 575 applies the modified security policy to the tenant.

6 is a block diagram illustrating an operation method of a cloud data center control system according to an embodiment of the present invention.

6, an operation method of a cloud data center control system according to an embodiment of the present invention includes collecting / storing / analyzing security-related information for each tenant (S610), reconfiguring a tenant related to a security module or a monitoring module A step S640 of applying the configuration of the tenant to which the determined security module or the monitoring module is reflected, and a step of determining the security / monitoring policy S650.

First, step S610 is a step of collecting / storing / analyzing security-related information for each tenant. The step S610 may be performed in the security monitoring and analysis unit 560 and the analysis result is recorded in the information storage unit 570 as the tenant security information 576 and notified to the tenant security module configuration determination unit 510 . At this time, the collection of security information may be collected from integrated security equipment or integrated security monitoring equipment, and it may be processed by tenant. Also there is security monitoring device for each tenant, which may be collected by tenant. . The present invention is not limited to this collection or analysis method.

Next, in the step of determining reconfiguration related to the security module, the necessity of reconfiguring (adding / deleting / changing) the security module to the corresponding tenant is determined based on the analysis result of the security related information for each tenant (S620) Accordingly, the tenant configuration information is changed (S621). The steps S620 and S621 may be performed by the tenant security module configuration determining unit 510 in accordance with the security related information for each tenant provided from the security monitoring and analyzing unit 560 and the security module information 571 stored in the information storing unit 570 . ≪ / RTI > Here, the security module can perform at least one of the functions of IPS (Intrusion Prevention System), IDS (Intrusion Detection System), and UTM (Unified Threat Management) as described above. Can do it

Next, in the step of determining the reconfiguration related to the monitoring module, the necessity of reconfiguring (adding / deleting / changing) the monitoring module to the corresponding tenant is determined based on the analysis result of security-related information for each tenant (S630) Accordingly, the tenant configuration information is changed (S631). The steps (S630 and S631) are performed by the tenant monitoring module configuration determining unit 520 in accordance with the security related information for each tenant provided from the security monitoring and analyzing unit 560 and the monitoring module information 572 stored in the information storing unit 570 . ≪ / RTI >

Next, in step S640, the security module or the monitoring module determined by the tenant security module configuration determining unit 510 or the tenant monitoring module configuration determining unit 520 is actually reflected in the virtual infrastructure defined for the tenant. Step S640 may be performed by the tenant configuration application unit 540. [

At this time, The security module or the monitoring module may be located between virtual machines constituting the tenant or in front of a virtual machine constituting the tenant. Alternatively, the security module may be configured to replace the basic security function provided in the tenant. In addition, the security module or the monitoring module may be driven by using a separate virtual machine on the tenant, or may be additionally installed and operated in a virtual machine existing in the tenant.

Finally, in step S650, if it is determined that there is a change (addition / modification / deletion) of the security / monitoring module or a policy change is required to the security / monitoring module according to the analysis result, the security policy is modified to the corresponding tenant, To be applied. The security policy also includes changes to the monitoring module, including changes to the integrated security module or tenant security module policies.

The above procedures can be repeated cyclically or event-based non-periodically, and can be applied differently for each tenant.

Meanwhile, in the above embodiment, the security service for each tenant is strengthened according to the situation. However, various embodiments of the present invention can return the security service to the original level when the temporary security problem of the tenant is solved. Accordingly, in the present invention, it is possible to adjust not only the security service for each tenant but also the security service to an appropriate level according to the situation.

As described above, according to the security analysis result, since the security module or the monitoring module can be changed and configured according to the tenant instead of simply applying the policy change according to the result of the security analysis, the new security module can be applied from time to time and various security functions can be used have. In addition, these functions can be performed automatically, which is advantageous in maintaining or enhancing the appropriate level of security service according to the situation.

The components constituting the cloud data center control system and system for providing the tenant security service according to the present invention may be constituted by program codes, and the program codes may be stored in at least one memory device, . ≪ / RTI > At this time, the at least one memory device and the at least one processor may exist in one apparatus or may be dispersed in two or more apparatuses. In addition, each of the above-described components is defined by a desired function of each component, and is not limited by the above-mentioned names. Also, at least two of the above-described components may be integrated into one functional unit. Also, at least one of the above-described components may be implemented by being distributed in two or more functional units.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

500: Cloud data center control system
510: Tenant Security Module Configuration Decision Unit
520: Tenant monitoring module configuration determining unit
530: Tenant policy decision unit
540: Tenant configuration application unit, 550: Tenant security policy application unit
560: Security Monitoring and Application Department
570: Information storage unit
571: Security module information, 572: Monitoring module information
573: Policy information by security module, 574: Tenant configuration information
575: Tenant security policy information, 576: Tenant security information

Claims (20)

As a cloud data center control system for providing tenant-specific security services in a cloud data center using virtualization technology,
A tenant security module configuration determining unit for determining a security module added to the tenant and an installation location of the security module;
A tenant monitoring module configuration determining unit for determining a monitoring module added to the tenant and an installation location of the monitoring module; And
And a tenant policy determination unit for determining a policy to be used for the security module or the monitoring module.
Cloud data center control system. The method according to claim 1,
And a security monitoring and analysis unit for performing security related monitoring and analysis to provide security-related information for each tenant,
Wherein the tenant security module configuration determining unit determines an installation location of the security module and the security module added to the tenant based on security-related information for each tenant provided by the security monitoring and analysis unit.
Cloud data center control system. The method according to claim 1,
Further comprising a tenant configuration application unit for applying the security module determined by the tenant security module configuration determination unit or the monitoring module determined by the tenant monitoring module configuration determination unit to the virtual infrastructure defined for the tenant.
Cloud data center control system. The method according to claim 1,
And a tenant security policy application unit applying a common security policy commonly applied to tenants.
Cloud data center control system. The method of claim 4,
Wherein the common security policy is a firewall rule.
Cloud data center control system. The method according to claim 1,
Wherein the security module is a module that performs at least one of an Intrusion Prevention System (IPS), an Intrusion Detection System (IDS), and a Unified Threat Management (UTM)
Cloud data center control system. The method according to claim 1,
Characterized in that the monitoring module is a flow monitoring module.
Cloud data center control system. The method according to claim 1,
Wherein the security module is located between virtual machines constituting the tenant or in front of a virtual machine constituting the tenant.
Cloud data center control system. The method according to claim 1,
Wherein the security module is configured to replace a basic security function provided in the tenant.
Cloud data center control system. The method according to claim 1,
Wherein the security module or the monitoring module is driven by using a separate virtual machine on the tenant or further installed and driven in a virtual machine existing in the tenant.
Cloud data control system. As a method of providing tenant-specific security services in a cloud data center using virtualization technology,
Determining a security module to be added to the tenant and an installation location of the security module based on security-related information about the tenant;
Determining installation positions of the monitoring module and the monitoring module added to the tenant based on security-related information about the tenant; And
And determining a policy to be used for the security module or the monitoring module.
How to provide tenant security services in the cloud data center. The method of claim 11,
Further comprising monitoring and analyzing security related information to collect security-related information for each tenant.
How to provide tenant security services in the cloud data center. The method of claim 11,
Further comprising applying the determined security module or monitoring module to a virtual infrastructure defined for the tenant.
How to provide tenant security services in the cloud data center. The method of claim 11,
Wherein the security module is a module that performs at least one of an Intrusion Prevention System (IPS), an Intrusion Detection System (IDS), and a Unified Threat Management (UTM)
How to provide tenant security services in the cloud data center. The method of claim 11,
Characterized in that the monitoring module is a flow monitoring module.
How to provide tenant security services in the cloud data center. The method of claim 11,
Wherein the security module is located between virtual machines constituting the tenant or in front of a virtual machine constituting the tenant.
How to provide tenant security services in the cloud data center. The method of claim 11,
Wherein the security module is configured to replace a basic security function provided in the tenant.
How to provide tenant security services in the cloud data center. A cloud data center control system for providing tenant-specific security services in a cloud data center using virtualization technology, comprising: a memory device storing program codes; and at least one processor executing the program codes,
The program code comprises:
Determining a security module to be added to the tenant and an installation location of the security module based on security-related information about the tenant;
Determining installation positions of the monitoring module and the monitoring module added to the tenant based on security-related information about the tenant; And
And determining a policy to be used for the security module or the monitoring module.
Cloud data center control system. 19. The method of claim 18,
Wherein the security module is a module that performs at least one of an Intrusion Prevention System (IPS), an Intrusion Detection System (IDS), and a Unified Threat Management (UTM)
Cloud data center control system. 19. The method of claim 18,
Wherein the security module or the monitoring module is driven by using a separate virtual machine on the tenant or further installed and driven in a virtual machine existing in the tenant.
Cloud data center control system.

Images