考虑拜占庭属性的SDN安全控制器多目标优化部署方案

王涛; 陈鸿昶

doi:10.11959/j.issn.2096-109x.2021060

您当前的位置：

首页 >

文章列表页 >

考虑拜占庭属性的SDN安全控制器多目标优化部署方案

专栏Ⅱ：SDN与云计算安全 | 更新时间：2024-06-03

- 考虑拜占庭属性的SDN安全控制器多目标优化部署方案
- Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes
- 网络与信息安全学报 2021年7卷第3期页码：72-84
- 作者机构：
- 作者简介：
  
  [ "王涛（1993- ），男，山东临朐人，信息工程大学博士生，主要研究方向为SDN安全" ]
  [ "陈鸿昶（1964- ），男，河南新密人，信息工程大学教授、博士生导师，主要研究方向为未来网络体系结构、人工智能" ]
- 基金信息：
  
  The National Key R ＆ D Program of China(2018YFB0804004);国家自然科学基金;The National Natural Science Foundation of China(62072467);国家自然科学基金创新研究群体基金资助项目;The Foundation for Innovative Research Groups of the National Natural Science Foundation of China(61521003)
- DOI：10.11959/j.issn.2096-109x.2021060
  中图分类号： TP393
- 网络首发：2021-06，
  
  纸质出版：2021-06-15
- 稿件说明：
移动端阅览
王涛, 陈鸿昶. 考虑拜占庭属性的SDN安全控制器多目标优化部署方案[J]. 网络与信息安全学报, 2021,7(3):72-84.

Tao WANG, Hongchang CHEN. Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes[J]. Chinese Journal of Network and Information Security, 2021, 7(3): 72-84.
王涛, 陈鸿昶. 考虑拜占庭属性的SDN安全控制器多目标优化部署方案[J]. 网络与信息安全学报, 2021,7(3):72-84. DOI： 10.11959/j.issn.2096-109x.2021060.

Tao WANG, Hongchang CHEN. Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes[J]. Chinese Journal of Network and Information Security, 2021, 7(3): 72-84. DOI： 10.11959/j.issn.2096-109x.2021060.

摘要

通过赋予软件定义网络分布式控制平面拜占庭属性可以有效提高其安全性。在实现拜占庭属性过程中，控制器部署的数量、位置，以及交换机与控制器之间的连接关系会直接影响全局网络关键性能指标。为此，提出了一种考虑拜占庭属性的 SDN 安全控制器多目标优化部署方案。首先，构建了综合考量交互时延、同步时延、负载差异程度和控制器部署数量等优化指标的拜占庭控制器部署问题（MOSBCPP）模型；然后，针对该模型个性化设计了包括控制器部署策略初始化函数、变异函数，快速非支配排序函数及精英策略选择函数等在内的NASG-II求解算法。相关仿真结果表明，该部署方案能够在有效降低交互时延、同步时延、负载差异程度和控制器部署数量等性能指标的同时提高控制平面安全性。

Abstract

By giving the software defined network distributed control plane Byzantine attributes

its security can be effectively improved.In the process of realizing Byzantine attributes

the number and location of controllers

and the connection relationship between switches and controllers can directly affect the key network performance.Therefore

a controller multi-objective optimization placement strategy for SDN security controllers considering Byzantine attributes was proposed.Firstly

a Byzantine controller placement problem (MOSBCPP) model that comprehensively considered interaction delay

synchronization delay

load difference and the number of controllers was constructed.Then

a solution algorithm based on NASG-II was designed for this model

which included the initialization function

the mutation function

the fast non-dominated sorting function and the elite strategy selection function.Simulation results show that this strategy can effectively reduce interaction delay

synchronization delay

load difference and the number of controllers

while improving control plane security.

关键词

Keywords

references

MCKEOWN N , ANDERSON T , BALAKRISHNAN H , et al . OpenFlow:enabling innovation in campus networks [J ] . ACM Sigcomm Computer Communication Review , 2008 , 38 ( 2 ): 69 - 74 .

TOOTOONCHIAN A , GANJALI Y . HyperFlow:a distributed control plane for OpenFlow [C ] // Internet Network Management Conference on Research on Enterprise Networking . 2011 .

CHICA J , IMBACHI J , BOTERO J . Security in SDN:a comprehensive survey [J ] . Journal of Network and Computer Applications , 2020 , 159 : 102595

KRIAA S , PAPILLON S , JAGADEESAN L , et al . Better safe than sorry:modeling reliability and security in replicated SDN controllers [C ] // 2020 16th International Conference on the Design of Reliable Communication Networks (DRCN) . 2020 .

HELLER B , SHERWOOD R , MCKEOWN N . The controller placement problem [J ] . ACM Sigcomm Computer Communication Review , 2012 , 42 ( 4 ): 473 - 478 .

SALLAHI A , ST-HILAIRE M . Optimal model for the controller placement problem in software defined networks [J ] . IEEE Communications Letters , 2015 , 19 ( 1 ): 30 - 33 .

YAO G , BI J , LI Y , et al . On the capacitated controller placement problem in software defined networks [J ] . IEEE Communications Letters , 2014 , 18 ( 8 ): 1339 - 1342 .

HU Y , LUO T , WANG W , et al . On the load balanced controller placement problem in software defined networks [C ] // 2016 2nd IEEE International Conference on Computer and Communications (ICCC) . 2016 .

BALA P . Capacitated next controller placement in software defined networks [J ] . IEEE Transactions on Network and Service Management , 2017 , 14 ( 3 ): 514 - 527 .

ISHIGAKI G , SHINOMIYA N . Controller placement algorithm to alleviate burdens on communication nodes [C ] // International Conference on Computing . 2016 .

HU Y , WANG W , GONG X , et al . On reliability-optimized controller placement for software-defined networks [J ] . China Communications , 2014 , 11 ( 2 ): 38 - 54 .

吴奇 , 陈鸿昶 . 低故障恢复开销的软件定义网络控制器布局算法 [J ] . 网络与信息安全学报 , 2020 , 6 ( 6 ): 97 - 104 .

WU Q , CHEN H C . Low fault recovery cost controller placement strategy in software-defined networks [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 6 ): 97 - 104 .

WANG G , ZHAO Y , HUANG J , et al . An effective approach to controller placement in software defined wide area networks [J ] . IEEE Transactions on Net-work and Service Management , 2018 , 15 ( 1 ): 344 - 355 .

史久根 , 谢熠君 , 孙立 , 等 . 软件定义网络中面向时延和负载的多控制器放置策略 [J ] . 电子与信息学报 , 2019 , 41 ( 8 ): 1869 - 1876 .

SHI J G , XIE Y J , SUN L , et al . Multi-controller placement strategy based on latency and load in software defined network [J ] . Journal of Electronics ＆ Information Technology , 2019 , 41 ( 8 ): 1869 - 1876 .

LIAO J , SUN H . Density cluster based approach for controller placement problem in large-scale software defined networkings [J ] . Computer Networks , 2017 , 112 ( 1 ): 24 - 35 .

ZHANG Y , BEHESHTI N , TATIPAMULA M . On resilience of split-architecture networks [C ] // 2011 IEEE Global Telecommunications Conference-GLOBECOM 2011 . 2012 .

ZHAO J , QU H , ZHAO J , et al . Towards controller placement problem for software-defined network using affinity propagation [J ] . Electronics Letters , 2017 , 53 ( 14 ): 928 - 929 .

史久根 , 邾伟 , 贾坤荧 , 等 . 软件定义网络中基于负载均衡的多控制器部署算法 [J ] . 电子与信息学报 , 2018 , 40 ( 2 ): 455 - 461 .

SHI J G , ZHU W , JIA K Y , et al . Multi-controller deployment algorithm based on load balance in software defined network [J ] . Journal of Electronics ＆ Information Technology , 2018 , 40 ( 2 ): 455 - 461 .

吴奇 , 陈鸿昶 . 软件定义网络容错控制平面的最小覆盖布局方法 [J ] . 电子与信息学报 , 2020 , 42 ( 12 ): 2849 - 2856 .

WU Q , CHEN H C . Minimal coverage model for fault-tolerant controller placement in software-defined networks [J ] . Journal of Electronics ＆ Information Technology , 2020 , 42 ( 12 ): 2849 - 2856 .

XIE J , GUO D , ZHU X , et al . Minimal fault-tolerant coverage of controllers in IaaS datacenters [J ] . IEEE Transactions on Services Computing , 2020 , 13 ( 6 ): 1128 - 1141 .

浏览量

356

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于规则关联的安全数据采集策略生成

低故障恢复开销的软件定义网络控制器布局算法