软件定义网络中控制器调度时间机制设计与实现

卢振平; 陈福才; 程国振

doi:10.11959/j.issn.2096-109x.2018003

您当前的位置：

首页 >

文章列表页 >

软件定义网络中控制器调度时间机制设计与实现

学术论文 | 更新时间：2024-06-03

- 软件定义网络中控制器调度时间机制设计与实现
- Design and implementation of the controller scheduling-time in SDN
- 网络与信息安全学报 2018年4卷第1期页码：36-44
- 作者机构：
- 作者简介：
  
  [ "卢振平（1992-），男，河南商丘人，国家数字程控交换系统工程技术研究中心硕士生，主要研究方向为软件定义网络、网络先进防御。" ]
  [ "陈福才（1974-），男，江西南昌人，硕士，国家数字程控交换系统工程技术研究中心研究员，主要研究方向为电信网关防、网络安全。" ]
  [ "程国振（1986-），男，山东菏泽人，博士，国家数字程控交换系统工程技术研究中心助理研究员，主要研究方向为云数据中心、软件定义网络、网络安全。" ]
- 基金信息：
  
  国家自然科学基金创新研究群体基金资助项目;The Foundation for Innovative Research Groups of the National Natural Science Foundation of China(61521003);国家重点研发计划项目;The National Key R＆D Program of China(2016YFB0800100);国家重点研发计划项目;The National Key R＆D Program of China(2016YFB0800101);国家自然科学基金资助项目;The National Natural Science Foundation of China(61309020);国家自然科学基金资助项目;The National Science Foundation for Distinguished Young Scholars of China(61602509)
- DOI：10.11959/j.issn.2096-109x.2018003
  中图分类号： TP393
- 网络首发：2018-01，
  
  纸质出版：2018-01-15
- 稿件说明：
移动端阅览
卢振平, 陈福才, 程国振. 软件定义网络中控制器调度时间机制设计与实现[J]. 网络与信息安全学报, 2018,4(1):36-44.

Zhenping LU, Fucai CHEN, Guozhen CHENG. Design and implementation of the controller scheduling-time in SDN[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 36-44.
卢振平, 陈福才, 程国振. 软件定义网络中控制器调度时间机制设计与实现[J]. 网络与信息安全学报, 2018,4(1):36-44. DOI： 10.11959/j.issn.2096-109x.2018003.

Zhenping LU, Fucai CHEN, Guozhen CHENG. Design and implementation of the controller scheduling-time in SDN[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 36-44. DOI： 10.11959/j.issn.2096-109x.2018003.

摘要

在软件定义网络的控制平面引入多个控制器，从而动态地改变控制器与底层网络的映射关系是一种有效缓解控制器安全威胁的方法。然而，现有的工作缺乏研究控制器动态调度的时间问题，由此，在分析软件定义网络的安全现状以及动态控制器研究的基础之上，首先说明了动态平面控制器调度时间的重要性，并在先前的研究基础之上刻画了动态控制平面的安全工作流程；进一步地，将动态调度的时间问题建模为更新收益过程，并提出一种对防御者最优的调度算法。实验仿真基于真实的网络攻击信息集，对比分析表明，提出的算法明显优于固定周期的算法和随机算法。

Abstract

Introducing multiple controllers to software defined network so that dynamically altering the mapping relationship between controller and the underlying network is an effective method to ease the security threats in control plane.However

little previous work has been done to investigate the economical time in dynamic-scheduling controllers.Firstly

the importance of scheduling-time in dynamic control plane based on security in SDN and dynamic control plane was introduced.Further

this problem was modeled as a renewal reward process and an optimal algorithm in deciding the right time to schedule was proposed.In our experiments

Simulations based on real network attack dataset are conducted and it demonstrate that proposed algorithm outperforms fixed-cycle algorithms and random algorithm.

关键词

Keywords

references

JAIN S , KUMAR A , MANDAL S , et al . B4:experience with a globally-deployed software defined wan [J ] . Computer Communication Review , 2013 , 43 ( 4 ): 3 - 14 .

KREUTZ D , RAMOS F M V , VERISSIMO P . Towards secure and dependable software-defined networks [C ] // ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking . 2013 : 55 - 60 .

LENG J , ZHOU Y , ZHANG J , et al . An inference attack model for flow table capacity and usage:exploiting the vulnerability of flow table overflow in software-defined network [J ] . Water Air ＆ Soil Pollution , 2015 , 85 ( 3 ): 1413 - 1418 .

SONCHACK J , DUBEY A , AVIV A J , et al . Timing-based reconnaissance and defense in software-defined networks [C ] // Conference on Computer Security Applications . 2016 : 89 - 100 .

CUI H , KARAME G O , KLAEDTKE F , et al . On the fingerprinting of software-defined networks [J ] . IEEE Transactions on Information Forensics ＆ Security , 2016 , 11 ( 10 ): 2160 - 2173 .

BERDE P , GEROLA M , HART J , et al . ONOS:towards an open,distributed SDN OS [C ] // The Workshop on Hot Topics in Software Defined Networking . 2014 : 1 - 6 .

MEDVED J , VARGA R , TKACIK A , et al . OpenDaylight:towards a model-driven SDN controller architecture [C ] // International Symposium on a World of Wireless,Mobile and Multimedia Networks . 2014 : 1 - 6 .

LI H , LI P , GUO S , et al . Byzantine-resilient secure software-defined networks with multiple controllers in cloud [C ] // International Conference on Communications . 2014 : 695 - 700 .

ELDEFRAWY K , KACZMAREK T . Byzantine fault tolerant software-defined networking (SDN) controllers [C ] // Computer Society International Conference on Computers,Software ＆ Applications . 2016 : 208 - 213 .

WANG T , LIU F , GUO J , et al . Dynamic SDN controller assignment in data center networks:Stable matching with transfers [C ] // The IEEE International Conference on Computer Communications . 2016 : 1 - 9 .

QI C , WU J , HU H , et al . An intensive security architecture with multi-controller for SDN [C ] // Computer Communications Workshops . 2016 : 401 - 402 .

扈红超 , 陈福才 , 王禛鹏 . 拟态防御 DHR 模型若干问题探讨和性能评估 [J ] . 信息安全学报 , 2016 , 1 ( 4 ): 40 - 51 .

HU H C , CHEN F C , WANG Z P . Discussion and performance evaluation of the proposed DHR model [J ] . Journal of Cyber Security , 2016 , 1 ( 4 ): 40 - 51

QI C , WU J , HU H , et al . Dynamic-scheduling mechanism of controllers based on security policy in software-defined network [J ] . Electronics Letters , 2016 , 52 ( 23 ): 1918 - 1920 .

LU Z P , CHEN F C . Poster:A Secure control plane with dynamic Multi-NOS for SDN [C ] // Network and Distributed System Security Symposium (NDSS) . 2017 .

ZHUANG R , DELOACH S A , OU X . Towards a theory of moving target defense [C ] // ACM Workshop on Moving Target Defense . ACM , 2014 : 31 - 40 .

RUI ZHUANG , ALEXANDRU G , et al . A theory of cyber attacks a step towards analyzing mtd systems [J ] .-- > In Proceedings of the 2nd ACM Workshop on Moving Target Defense (MTD) , 2015 .

BROOKS M , YANG B . A Man-in-the-Middle attack against OpenDayLight SDN control-ler [C ] // ACM Conference on Research in Information Technology . ACM , 2015 : 45 - 49 .

ECESSA . What does network downtime ＆ latency cost your business [EB/OL ] . http://www.ecessa.com/blog/downtime-costs http://www.ecessa.com/blog/downtime-costs .

ILGUN K , KEMMERER R A , PORRAS P A . State transition analysis:a rule-based intrusion detection approach [J ] . IEEE Transactions on Software Engineering , 1995 , 21 ( 3 ): 181 - 199 .

LEE S , YOON C . DELTA:a security assessment framework for software-defined networks [C ] // Network and Distributed System Security Symposium . 2017 .

WANG H , LI F , CHEN S . Towards cost-effective moving target defense against DDoS and covert channel attacks [C ] // ACM Workshop on Moving Target Defense . 2016 : 15 - 25 .

WANG A , CHANG W , MOHAISEN A , et al . Delving into internet DDoS attacks by botnets:characterization and analysis [C ] // The 45th IEEE International Conference on Dependable Systems and Networks (DSN) . 2015 .

MATTHEWS T . INCAPSULA survey :what DDoS attacks really cost businesses [EB/OL ] . http://lp.incapsula.com/rs/incapsulainc/images/eBook%20%20DDoS%20Impact%20Survey.pdf http://lp.incapsula.com/rs/incapsulainc/images/eBook%20%20DDoS%20Impact%20Survey.pdf .

JAFARIAN J H , AL-SHAER E , QI D . Adversary-aware IP address randomization for proactive agility against sophisticated attackers [C ] // The 34th IEEE Conference on Computer Communications (INFOCOM) . 2015 : 238 - 276 .

浏览量

1824

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

高效安全的软件定义网络拓扑发现协议

基于博弈的异构控制器云安全策略研究

基于贝叶斯−斯坦科尔伯格博弈的SDN安全控制平面模型

面向时延敏感的TRDP安全防护机制

面向软件定义晶上系统的安全多维互连网络