Research on Security of UDP Reflection Attack in Civil Aviation Information Network Based on SDN

摘要

Be aimed at generator protocol, domain name system protocol, network clock protocol, simple network management protocol, simple service discovery protocol. These five types of user datagram protocol (UDP) reflection attack amplifiers are proposed, and a UDP reflection attack response scheme based on IDS is proposed. On the premise of locating the reflection attack amplifier, combining with the software defined network technology of network boundary, the response rules based on OpenFlow flow table are used to filter the control command message, so as to prevent UDP reflection attack. The test results on the boundary of civil aviation information network verify the operability and effectiveness of the response scheme.