一种基于OpenFlow的入侵检测评估系统

摘要

文章提出了一种基于OpenFlow 网络技术的入侵检测评估系统，并基于OpenFlow 技术建立了入侵检测评价模型，同时阐述了该模型的模型框架、设置方法和模型工作过程，并在该模型的基础上设计了一个评测系统，该系统利用OpenFlow 灵活的网络控制能力为IDS 测评搭建真实可控的网络环境，在为入侵检测提供了网络流量的同时还为测评提供了攻击数据，最后以评测系统对模型进行了仿真实验，并分析了实验结果，得出基于OpenFlow的入侵检测评估模型准确性与评测效果性能优异的结论。%This paper proposes an intrusion detection evaluation system based on OpenFlow network technology,and based on the OpenFlow technology to establish the intrusion detection evaluation model, and elaborated the model framework,the model method and model of the working process, and on the basis of the model to design a performance evaluation system, the system uses the ability of network OpenFlow control of flexible controllable IDS evaluation to build the real network environment,provides the network traffic but also provides data for the evaluation of attack for intrusion detection,and finally to the evaluation system of the model were simulated,and the result is analyzed,the OpenFlow intrusion detection evaluation model and evaluation conclusion performance accuracy is excellent based on.