基于博弈的异构控制器云安全策略研究

胡军台; 武振宇; 付晓; 王逸超

doi:10.11959/j.issn.2096-109x.2018075

您当前的位置：

首页 >

文章列表页 >

基于博弈的异构控制器云安全策略研究

论文 | 更新时间：2024-06-03

- 基于博弈的异构控制器云安全策略研究
- Game model based security strategy of heterogeneous controllers in the cloud
- 网络与信息安全学报 2018年4卷第9期页码：52-59
- 作者机构：
- 作者简介：
  
  [ "胡军台（1969-），男，河南禹州人，硕士，国网河南省电力公司平顶山供电公司总工程师，主要研究方向为电力系统及电网规划管理。 " ]
  [ "武振宇（1971-），男，河北枣强人，硕士，国网河南省电力公司平顶山供电公司教授级高级工程师，主要研究方向为电力系统及电网运行管理。" ]
  [ "付晓（1979-），男，河南浙川人，硕士，国网河南省电力公司平顶山供电公司高级工程师，主要研究方向为电网发展与规划。" ]
  [ "王逸超（1989-），男，河南平顶山人，国网河南省电力公司平顶山供电公司助理工程师，主要研究方向为电网规划及科技信息管理。" ]
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018075
  中图分类号： TP393.08
- 网络首发：2018-09，
  
  纸质出版：2018-09-15
- 稿件说明：
移动端阅览
胡军台, 武振宇, 付晓, 等. 基于博弈的异构控制器云安全策略研究[J]. 网络与信息安全学报, 2018,4(9):52-59.

Juntai HU, Zhenyu WU, Xiao FU, et al. Game model based security strategy of heterogeneous controllers in the cloud[J]. Chinese Journal of Network and Information Security, 2018, 4(9): 52-59.
胡军台, 武振宇, 付晓, 等. 基于博弈的异构控制器云安全策略研究[J]. 网络与信息安全学报, 2018,4(9):52-59. DOI： 10.11959/j.issn.2096-109x.2018075.

Juntai HU, Zhenyu WU, Xiao FU, et al. Game model based security strategy of heterogeneous controllers in the cloud[J]. Chinese Journal of Network and Information Security, 2018, 4(9): 52-59. DOI： 10.11959/j.issn.2096-109x.2018075.

摘要

在软件定义数据中心网络的控制层采用多个异构控制器是提升其安全的一种有效方式。针对网络不同安全需求下控制器的部署策略问题，提出了一种博弈模型。具体地，首先，利用博弈论知识刻画了攻防博弈模型，求解纳什均衡，进而指导设计安全策略；其次，在均衡基础上分析攻防策略行为对控制层安全状态的影响；最后，仿真结果表明提出的均衡策略的有效性，并描述了攻防策略交互的动态性。

Abstract

Deploying multiple heterogeneous controllers at the control level of a software-defined data center is an effective way to increase security.In view of the deployment strategy of controllers under different security requirements of the network

a game model was presented.Specifically

firstly

the game theory was used to depict the attack and defense game model and solve the Nash equilibrium

and then guided the design of security strategy.Secondly

the impact of the strategy of attack and defense on the security status of the control layer were analyzed.Finally

the simulation results show the effectiveness of the proposed equilibrium strategy

and describe the dynamic interaction strategy.

关键词

Keywords

references

WANG T , LIU F , GUO J , et al . Dynamic SDN controller assignment in data center networks:Stable matching with transfers [C ] // IEEE INFOCOM 2016- IEEE International Conference on Computer Communications . 2016 : 1 - 9 .

王蒙蒙 , 刘建伟 , 陈杰 , 等 . 软件定义网络:安全模型、机制及研究进展 [J ] . 软件学报 , 2016 , 27 ( 4 ): 969 - 992 .

WANG M M , LIU J W , CHEN J , et al . Software defined networking:security model,threats and mechanism,software defined networking:security model,threats and mechanism [J ] . Journal of Software , 2016 , 27 ( 4 ): 969 - 992 .

SCOTT-HAYWARD S , O'CALLAGHAN G , SEZER S . SDN security:a survey [C ] // Future Networks and Services . 2013 : 1 - 7 .

KOPONEN T , CASADO M , GUDE N , et al . Onix:a distributed control platform for large-scale production networks [C ] // Usenix Conference on Operating Systems Design and Implementation . 2010 : 351 - 364 .

BERDE P , HART J , HART J , et al . ONOS:towards an open,distributed SDN OS [C ] // The Workshop on Hot Topics in Software Defined Networking . 2014 : 1 - 6 .

MEDVED J , VARGA R , TKACIK A , et al . OpenDaylight:towardsa model-driven SDN controller architecture [C ] // IEEE International Symposium on A World of Wireless,Mobile and Multimedia Networks . 2014 : 1 - 6 .

AHMAD I , NAMAL S , YLIANTTILA M , et al . Security in software defined networks:a survey [J ] . IEEE Communications Surveys ＆ Tutorials , 2015 , 17 ( 4 ): 2317 - 2346 .

LI H , LI P , GUO S , et al . Byzantine-resilient secure software-defined networks with multiple controllers in cloud [J ] . IEEE Transactions on Cloud Computing , 2015 , 2 ( 4 ): 436 - 447 .

ELDEFRAWY K , KACZMAREK T . Byzantine Fault Tolerant Software-Defined Networking (SDN) Controllers [C ] // Computer Software and Applications Conference . 2016 : 208 - 213 .

HU H , PANG L , WANG Z , et al . Orchestrating Network Functions in Software-Defined Networks [J ] . China Communications , 2017 , 14 ( 2 ): 104 - 117 .

QI C , et al . An intensive security architecture with multi-controller for SDN [C ] // INFOCOM Posters , 2016 .

QI C , WU J , HU H , et al . Dynamic-scheduling mechanism of controllers based on security policy in software-defined network [J ] . Electronics Letters , 2016 , 52 ( 23 ): 1918 - 1920 .

LU Z , CHEN F , WU J , et al . Poster:A Secure control plane with dynamic multi-NOS for SDN [C ] // Network and Distributed System Security Symposium (NDSS) . 2017 .

SALIH M A , COSMAS J , ZHANG Y . OpenFlow 1.3 extension for OMNeT++ [C ] // IEEE International Conference on Computer and Information Technology; Ubiquitous Computing and Communications; Dependable,Autonomic and Secure Computing; Pervasive Intelligence and Computing . 2015 : 1632 - 1637 .

LIANG L , WU J , COOK W D , et al . The DEA game cross- efficiency model and its Nash equilibrium [J ] . Operations Research , 2008 , 56 ( 5 ): 1278 - 1288 .

浏览量

1156

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

软件定义网络中控制器调度时间机制设计与实现

基于贝叶斯−斯坦科尔伯格博弈的SDN安全控制平面模型

面向时延敏感的TRDP安全防护机制

面向软件定义晶上系统的安全多维互连网络

工业互联网蜜网技术综述