基于SDN的知识库构建及应用

发布时间：2018-05-09 03:27

本文选题：软件定义网络 + 安全　；参考：《北京邮电大学》2017年硕士论文

【摘要】：软件定义网络(Software Define Networking,SDN)通过软件的形式实现了对于现有网络的重定义,软件定义网络控制与数据分离的思想,集中控制的特点和灵活可编程的特性使其对于现有网络带来了巨大的冲击。无论从哪个角度来看,SDN的出现都给目前的网络带来了较大的变革和挑战。它不仅仅为传统解决方案带来了新思路,同时也带来了相应的问题。“SDN网络安全技术研究”项目组通过软件定义安全体系,贯彻了控制与数据分离的思想,通过安全控制器的实现,得到了应对多种安全场景的能力。但是随着SDN网络的愈发成熟,SDN网络中产生了大量数据,但是这些数据并没有得到有效的积累和利用。通过对SDN安全需求和业务场景的分析,本课题针对SDN网络控制器、SDN网络云环境中的大量数据,总结出了它们的整合处理并加以存储的方式,通过构建高可用、高性能的分布式系统,构建了基于SDN的知识库,使SDN网络中的数据发挥出其应有的作用和价值,并出于安全分析的目的,构建了基于SDN知识库的相关应用。在充分调研的基础上,本文对于SDN知识库构建时的技术选型做了严谨的判断,使用ElasticSearch作为知识库的主要后台数据持久化存储方式,即使在海量数据的情况下,其同样能够提供强大的检索能力。采用基于消息队列的订阅/推送系统,实现了模块间信息的异步传输。在知识库应用方面,以Python Django构建了方便可维护的应用项目。在数据可视化方面,构建了有着良好用户体验的安全应用。本文通过对于SDN知识库的构建及其应用的论述,说明了 SDN网络中大量的网络数据的处理方式,并在一定程度上证明了在未来数据分析中SDN网络数据能够发挥的重大作用。
[Abstract]:Software Define networking (SDN) realizes the redefinition of existing network, the idea of software definition network control and data separation through the form of software. The characteristics of centralized control and flexible programmable make it a huge impact on the existing network. No matter from which point of view, the emergence of SDN has brought great changes and challenges to the current network. It not only brings new ideas to the traditional solutions, but also brings the corresponding problems. The project team of "SDN Network Security Technology Research" implements the idea of control and data separation through software definition of security system. Through the implementation of the security controller, the ability to deal with various security scenarios is obtained. However, with the maturity of SDN networks, a large number of data have been generated, but these data have not been effectively accumulated and utilized. Based on the analysis of the security requirements and business scenarios of SDN, this paper summarizes the integrated processing and storage methods for a large number of data in the network cloud environment of SDN network controller. In the high performance distributed system, the knowledge base based on SDN is constructed, which makes the data in SDN network play its due role and value. For the purpose of security analysis, the related application based on SDN knowledge base is constructed. On the basis of full investigation, this paper makes a rigorous judgment on the technology selection of SDN knowledge base construction, and uses ElasticSearch as the main storage method of backstage data in the knowledge base, even in the case of massive data. It can also provide powerful retrieval capabilities. A message queue based subscription / push system is used to realize asynchronous transmission of information between modules. In the aspect of knowledge base application, a convenient and maintainable application project is constructed with Python Django. In the aspect of data visualization, a secure application with good user experience is constructed. In this paper, the construction of SDN knowledge base and its application are discussed, and the way to deal with a large number of network data in SDN network is explained. To some extent, it is proved that SDN network data can play an important role in data analysis in the future.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.02

【相似文献】