软件定义网络中基于加密的端口跳变技术研究

摘要

针对软件定义网络中拒绝服务攻击问题,在其控制平面提出了加密的端口跳变解决方案.利用软件定义网络集中控制可编程特性,提出了改进的加密端口跳变策略,保证了从端口生成初期到通信过程的安全性,并采用基于Ack的同步技术保证了通信过程的连续性.理论结合实验表明,端口跳变技术在OpenFlow实验平台上实现简单,改进的加密算法安全性高,是基于软件定义网络的轻量级端口跳变策略.%Aiming at the DoS attack in software defined network, an encryption-based port hopping solution is proposed in its control plane.Using software to define the control programmability of the centralized network, an improved encryption port hopping strategy is proposed to ensure the security from the initial port generation to the communication process.We also use Ack-based synchronization technology to ensure the continuity of the communication process.Theory combined with the experimental results show that the port hopping technology is simple and improved on the OpenFlow experimental platform, and it is a lightweight port hopping strategy based on software defined network.