基于网络资源管理技术的SDN DoS攻击动态防御机制

发布时间：2018-07-12 09:20

本文选题：软件定义网络 + 拒绝服务攻击　；参考：《计算机研究与发展》2017年10期

【摘要】：软件定义网络(software defined networking,SDN)已经迅速成为一种新的网络通信管理模式,极大地改变了传统网络架构.SDN可以通过将控制层与数据层分离来实现更细粒度的网络控制与管理.但是,转控分离的SDN架构也使得控制器极易成为DoS攻击的目标.为解决这一问题,现对SDN中的DoS攻击进行全面的研究,并提出一种轻量有效的MinDoS防御机制,该机制主要由简化的DoS攻击探测模块和优先级管理模块这2个核心模块实现.该机制可以根据用户信任值将流请求分类并将其划分到具有不同优先级的多个缓冲队列,然后使用SDN控制器以双轮询机制来调度处理这些流请求,从而在DoS攻击下更好地保护控制器.另外,MinDoS还结合了多控制器动态调度策略来降低全局响应时间,提高用户服务质量.最后,分别在SDN单控制器和多控制器实验环境中对MinDoS防御性能进行综合评估,实验结果表明:MinDoS防御效果良好,系统设计满足预期目标.
[Abstract]:Software defined Network networking (software defined) has rapidly become a new network communication management mode, which greatly changes the traditional network architecture. SDN can realize finer granularity network control and management by separating the control layer from the data layer. However, the SDN architecture, which is separated by switch control, makes the controller easy to be the target of dos attack. In order to solve this problem, a comprehensive study of dos attacks in SDN is carried out, and a lightweight and effective MinDoS defense mechanism is proposed. The mechanism is mainly implemented by two core modules: the simplified dos attack detection module and the priority management module. The mechanism can classify stream requests according to user trust values and divide them into multiple buffering queues with different priorities. Then the SDN controller is used to schedule and process these stream requests with a dual polling mechanism. In order to better protect the controller under dos attack. In addition, MinDoS combines multi-controller dynamic scheduling strategy to reduce global response time and improve user quality of service. Finally, the defense performance of MinDoS is evaluated in SDN single controller and multi-controller environment respectively. The experimental results show that the defense performance of MinDoS is good and the system design meets the expected goal.
【作者单位】：国家数字交换系统工程技术研究中心;
【基金】：国家自然科学基金创新群体项目(61521003);国家自然科学基金青年科学基金项目(61602509) 国家重点研发计划项目(2016YFB0800101) 河南省科技攻关计划项目(172102210615) 信息工程大学新兴方向培育基金项目(2016610708)~~
【分类号】：TP393.08

【相似文献】