计算机应用 ›› 2017, Vol. 37 ›› Issue (2): 383-387.DOI: 10.11772/j.issn.1001-9081.2017.02.0383

• 第十届中国可信计算与信息安全学术会议 • 上一篇    下一篇

IaaS环境下多租户安全资源分配算法和安全服务调度框架

苑中梁, 陈兴蜀, 王毅桐   

  1. 四川大学 计算机学院, 成都 610065
  • 收稿日期:2016-08-15 修回日期:2016-09-09 出版日期:2017-02-10 发布日期:2017-02-11
  • 通讯作者: 陈兴蜀,chenxsh@scu.edu.cn
  • 作者简介:苑中梁(1991-),男,硕士研究生,山西朔州人,主要研究方向:虚拟网络、云计算安全;陈兴蜀(1968-),女,四川自贡人,教授,博士,主要研究方向:信息安全、云计算安全、大数据分析;王毅桐(1987-),男,四川成都人,博士研究生,主要研究方向:云计算安全。
  • 基金资助:
    国家自然科学基金资助项目(61272447)。

Security resource allocation and service scheduling framework for multiple tenants in IaaS

YUAN Zhongliang, CHEN Xingshu, WANG Yitong   

  1. College of Computer Science, Sichuan University, Chengdu Sichuan 610065, China
  • Received:2016-08-15 Revised:2016-09-09 Online:2017-02-10 Published:2017-02-11
  • Supported by:
    This work is partially supported by the National Natural Science Foundation of China (61272447).

摘要: 针对基础设施即服务(IaaS)环境下多租户使用安全服务时由于安全资源有限和安全资源分配不均导致的效率低下问题,提出了一个租户安全资源调度框架。首先以最小最大公平算法为基础,结合Fair Scheduler的调度思想为租户设定了最小共享量和资源需求量属性;然后通过安全服务资源分配算法在保证租户最小共享量满足的前提下,尽可能公平地满足租户的资源需求;最后结合租户内任务调度和租户间资源抢占算法,实现了租户安全服务调度框架。实验结果表明,在随机资源分配条件下,安全服务资源分配算法与传统资源分配算法相比在资源利用率和作业效率上均有明显提高,安全服务调度框架可以有效解决多租户安全资源的分配和强占问题。

关键词: 云计算, 安全服务, 资源分配, 作业调度

Abstract: In Infrastructure-as-a-Service (IaaS) environment, the limited security service resources and uneven allocation of security resources for multiple tenants causes low efficiency of security service scheduling. To resolve this problem, a tenant security service scheduling framework was designed. Based on the minimum fairness algorithm and the scheduling idea of Fair Scheduler, the minimum sharing resources and resource demand attribute were set for the tenant. Then, the security service resource allocation algorithm was used to satisfy the tenant's resource demand as fair as possible to ensure the minimum sharing resources of the tenant. Finally, a tenant security service scheduling framework was implemented by combining the job scheduling algorithm within tenant and resource preemption algorithm among tenants. The experimental results show that under the condition of random allocation of resources, the proposed security service resource allocation algorithm is better than traditional algorithms in the aspects of resource utilization and operation efficiency, and the security service scheduling framework can solve the uneven allocation of security resources for multiple tenants.

Key words: cloud computing, security service, resource allocation, job scheduling

中图分类号: