关键词: SDN, 云计算, 强连通分量分解, 攻击图

Abstract: Different from the traditional computing model, the unique virtualization features and dynamic scalability of cloud computing pose challenges to the security research of cloud computing. A graph -based technical framework usingSDN(software defined network) is proposed toobtain information about network configuration and hostaccess control list, building a reachability map of the network system based on the information. The map is decomposed to obtain the SCC(strongly connected component), and parallel security analysis is performed on this basis. Finally, the attack graph is constructed based on the analyzing result. Experimental verification shows that there is a significant improvement of attack grhph generating speed compared with the traditional analyzing method.

Key words: SDN, cloud computing, strong connected component decomposition, attack graph