SDN架构及安全性研究  

Research on SDN Architecture and Security

作　　者：王淑玲[1] 李济汉[2] 张云勇[1] 房秉毅[1] 

机构地区：[1]中国联通集团研究院,北京100048 [2]北京邮电大学,北京100876

出　　处：《电信科学》2013年第3期117-122,共6页Telecommunications Science

基　　金：国家自然科学基金资助项目(No.1172134);"新一代宽带无线移动通信网"国家科技重大专项基金资助项目(No.2012ZX03002001-002;No.2013ZX03002004-002;No.2013ZX03002003-005)

摘　　要：随着云计算、移动互联网等新技术的发展和成熟,网络业务的多样化、基础资源能力的大力提升等给数据中心网络的可扩展性、可管理性、安全性等提出了新的要求。SDN体系架构的出现为目前网络问题的解决提供了新的方向,因而在产业界和研究领域得到了深入的研究和应用。但随着SDN相关网络设备的出现,安全问题成为制约其发展的一个重要因素。本文首先分析了SDN架构的产生背景,阐述了SDN的网络技术架构原理及目前的发展现状;随后对SDN架构中的安全特点、安全威胁进行了分析;最后,提出了一种SDN架构下的安全技术框架,从威胁分析、防御规则、防御方法 3个方面对SDN中的安全问题提出了建议。With the rapid development of cloud computing and mobile internet, the features that network exhibits, such as diversity, declare for urgent requirements for scalability, manageability and security of the data center. The SDN architecture shows a promising way of dealing with the above requirements of network through revolutionary innovation of the traditional network architecture, which attracts great interest of companies and research institutes. However, according to the recent research and progress of SDN, security problem has not been addressed, which will be a significant issue. Based on the situation, the basis of SDN, including the origination, architecture, standardization work and standardized protocol, were described, and the security issue was also analyzed. In the security part, the exhibiting new features of security problem for SDN, were analyzed, by listing the undergoing work, and then the security threats in SDN were concluded. Finally, a suggested architecture for security research of SDN was proposed.

关 键 词：软件定义网络 安全 OpenFlow. 

分 类 号：TN915.0[电子电信—通信与信息系统]