Game model based security strategy of heterogeneous controllers in the cloud

Juntai HU; Zhenyu WU; Xiao FU; Yichao WANG

doi:10.11959/j.issn.2096-109x.2018075

您当前的位置：

首页 >

文章列表页 >

Game model based security strategy of heterogeneous controllers in the cloud

Papers | 更新时间：2024-06-03

- Game model based security strategy of heterogeneous controllers in the cloud
- Chinese Journal of Network and Information Security Vol. 4, Issue 9, Pages: 52-59(2018)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018075
  CLC： TP393.08
- Online First：2018-09，
  
  Published：15 September 2018
- 稿件说明：
移动端阅览
Juntai HU, Zhenyu WU, Xiao FU, et al. Game model based security strategy of heterogeneous controllers in the cloud[J]. Chinese Journal of Network and Information Security, 2018, 4(9): 52-59.
DOI：

Juntai HU, Zhenyu WU, Xiao FU, et al. Game model based security strategy of heterogeneous controllers in the cloud[J]. Chinese Journal of Network and Information Security, 2018, 4(9): 52-59. DOI： 10.11959/j.issn.2096-109x.2018075.

摘要

在软件定义数据中心网络的控制层采用多个异构控制器是提升其安全的一种有效方式。针对网络不同安全需求下控制器的部署策略问题，提出了一种博弈模型。具体地，首先，利用博弈论知识刻画了攻防博弈模型，求解纳什均衡，进而指导设计安全策略；其次，在均衡基础上分析攻防策略行为对控制层安全状态的影响；最后，仿真结果表明提出的均衡策略的有效性，并描述了攻防策略交互的动态性。

Abstract

Deploying multiple heterogeneous controllers at the control level of a software-defined data center is an effective way to increase security.In view of the deployment strategy of controllers under different security requirements of the network

a game model was presented.Specifically

firstly

the game theory was used to depict the attack and defense game model and solve the Nash equilibrium

and then guided the design of security strategy.Secondly

the impact of the strategy of attack and defense on the security status of the control layer were analyzed.Finally

the simulation results show the effectiveness of the proposed equilibrium strategy

and describe the dynamic interaction strategy.

关键词

Keywords

references

WANG T , LIU F , GUO J , et al . Dynamic SDN controller assignment in data center networks:Stable matching with transfers [C ] // IEEE INFOCOM 2016- IEEE International Conference on Computer Communications . 2016 : 1 - 9 .

王蒙蒙 , 刘建伟 , 陈杰 , 等 . 软件定义网络:安全模型、机制及研究进展 [J ] . 软件学报 , 2016 , 27 ( 4 ): 969 - 992 .

WANG M M , LIU J W , CHEN J , et al . Software defined networking:security model,threats and mechanism,software defined networking:security model,threats and mechanism [J ] . Journal of Software , 2016 , 27 ( 4 ): 969 - 992 .

SCOTT-HAYWARD S , O'CALLAGHAN G , SEZER S . SDN security:a survey [C ] // Future Networks and Services . 2013 : 1 - 7 .

KOPONEN T , CASADO M , GUDE N , et al . Onix:a distributed control platform for large-scale production networks [C ] // Usenix Conference on Operating Systems Design and Implementation . 2010 : 351 - 364 .

BERDE P , HART J , HART J , et al . ONOS:towards an open,distributed SDN OS [C ] // The Workshop on Hot Topics in Software Defined Networking . 2014 : 1 - 6 .

MEDVED J , VARGA R , TKACIK A , et al . OpenDaylight:towardsa model-driven SDN controller architecture [C ] // IEEE International Symposium on A World of Wireless,Mobile and Multimedia Networks . 2014 : 1 - 6 .

AHMAD I , NAMAL S , YLIANTTILA M , et al . Security in software defined networks:a survey [J ] . IEEE Communications Surveys ＆ Tutorials , 2015 , 17 ( 4 ): 2317 - 2346 .

LI H , LI P , GUO S , et al . Byzantine-resilient secure software-defined networks with multiple controllers in cloud [J ] . IEEE Transactions on Cloud Computing , 2015 , 2 ( 4 ): 436 - 447 .

ELDEFRAWY K , KACZMAREK T . Byzantine Fault Tolerant Software-Defined Networking (SDN) Controllers [C ] // Computer Software and Applications Conference . 2016 : 208 - 213 .

HU H , PANG L , WANG Z , et al . Orchestrating Network Functions in Software-Defined Networks [J ] . China Communications , 2017 , 14 ( 2 ): 104 - 117 .

QI C , et al . An intensive security architecture with multi-controller for SDN [C ] // INFOCOM Posters , 2016 .

QI C , WU J , HU H , et al . Dynamic-scheduling mechanism of controllers based on security policy in software-defined network [J ] . Electronics Letters , 2016 , 52 ( 23 ): 1918 - 1920 .

LU Z , CHEN F , WU J , et al . Poster:A Secure control plane with dynamic multi-NOS for SDN [C ] // Network and Distributed System Security Symposium (NDSS) . 2017 .

SALIH M A , COSMAS J , ZHANG Y . OpenFlow 1.3 extension for OMNeT++ [C ] // IEEE International Conference on Computer and Information Technology; Ubiquitous Computing and Communications; Dependable,Autonomic and Secure Computing; Pervasive Intelligence and Computing . 2015 : 1632 - 1637 .

LIANG L , WU J , COOK W D , et al . The DEA game cross- efficiency model and its Nash equilibrium [J ] . Operations Research , 2008 , 56 ( 5 ): 1278 - 1288 .

Views

1156

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Design and implementation of the controller scheduling-time in SDN

Secure control plane for SDN using Bayesian Stackelberg games

Security scheme for time-critical TRDP message

Secure multidimensional interconnection network for the software defined system on wafer

Overview on industrial Internet honeynet technology

Related Author

Guozhen CHENG

Fucai CHEN

Zhenping LU

Guo-zhen CHENG

Fu-cai CHEN

Zhen-ping LU

LU Xiang

CUI Yulong

Related Institution

School of Cyber Security, University of CAS

Institute of Information Engineering, CAS

CRRC Qingdao Sifang Co., Ltd.

Information Engineering University

Engineering Research Center of Smart Energy, Civil Aviation Administration of China

⁰