基于SDN网络的共享数据安全的研究

发布时间：2018-10-21 08:16

【摘要】：不断发展的互联网已经将我们带入大数据时代,大量的敏感数据暴露在网络之中。由于数据缺乏安全的保护措施,导致许多恶性的信息泄密事件频发,信息安全变得更加引人关注。随着网络技术不断演进,SDN/NFV等新网络架构与技术应运而生。新的网络环境和技术形式为各种传统应用的发展带了新的可能性。本文将传统的信息安全领域放在新的网络环境下进行了一些研究和探索,着重研究了信息的安全传输和安全存储两个方面。为了增强研究的实用性,本文设计了一套信息的安全传输和存储模型。针对安全传输问题,本文首先分析了SDN网络环境下的安全服务接入方式,设计了一套基于注册和认证的安全服务管理方式。认证机制保证网络中加解密模块安全可靠,注册机制实现对其进行管理。安全传输模型以SDN控制器为中心,利用OpenFlow协议流表的方式搭建数据传输通道,并使用加解密模块对网络数据流进行加密处理,最终形成了一条安全的触发式传输隧道。数据在隧道中进行以密文形式进行传输。加解密模块基于NFV的思想进行设计,运行于通用的X86平台,利用软件编程的方式实现,可以灵活地对数据种类进行调整。针对安全存储问题,本文以时下流行的网络存储方式为研究对象。在分析了各种存储方案的前提下,最终设计了在存储服务器端利用分布式组合密钥对数据进行加密保护的存储模型。安全存储模型设计分为两大部分:数据加解密和安全密钥管理。加解密模块不与网络存储服务器进行强耦合,具有通用性;密钥管理模块采用了密钥组合方案,可以为用户提供自定义安全密钥的功能,增强了系统的安全性以及用户的参与性。为了更好地应用于SDN网络中,本文对安全存储模块进行了优化,即令SDN控制器管理网络中的安全存储模块的位置信息,使安全模块隐藏于网络之中。总之,本文利用SDN等网络技术,研究了信息的安全传输和存储问题,并提出了一套解决方案。
[Abstract]:The continuous development of the Internet has brought us into the big data era, a large number of sensitive data exposed to the network. Due to the lack of secure data protection, many malignant information leaks occur frequently, and information security becomes more and more concerned. With the continuous evolution of network technology, SDN/NFV and other new network architecture and technology emerged as the times require. The new network environment and technological forms bring new possibilities for the development of traditional applications. In this paper, the traditional field of information security is put into the new network environment for some research and exploration, focusing on the two aspects of secure transmission and storage of information. In order to enhance the practicability of the research, this paper designs a set of secure transmission and storage model of information. Aiming at the problem of secure transmission, this paper first analyzes the security service access mode in SDN network environment, and designs a set of security service management methods based on registration and authentication. The authentication mechanism ensures the security and reliability of the encryption and decryption module in the network, and the registration mechanism manages it. The secure transmission model takes the SDN controller as the center, uses the OpenFlow protocol stream table way to build the data transmission channel, and uses the encryption and decryption module to encrypt the network data flow, and finally forms a secure trigger transmission tunnel. Data is transmitted in a tunnel in ciphertext. The encryption and decryption module is designed based on the idea of NFV and runs on the general X86 platform. It is realized by software programming and can be adjusted flexibly. Aiming at the problem of secure storage, this paper takes the popular network storage as the research object. Based on the analysis of various storage schemes, a storage model for data encryption and protection using distributed composite keys on the storage server is designed. The design of secure storage model is divided into two parts: data encryption and decryption and security key management. The encryption and decryption module is not strongly coupled with the network storage server, so it is universal, and the key management module adopts the key combination scheme, which can provide the user with the function of customizing the security key. Enhanced system security and user participation. In order to be better applied in SDN network, the secure storage module is optimized in this paper, and even the SDN controller is made to manage the location information of the secure storage module in the network, so that the security module can be hidden in the network. In a word, this paper studies the secure transmission and storage of information by using network technology such as SDN, and puts forward a set of solutions.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.02;TP309

【相似文献】