软件定义网络安全研究  

Software-Defined Networking Security

作　　者：何恩[1] 张德治[1] 郝平[1] 

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2014年第1期86-90,共5页Communications Technology

摘　　要：软件定义网络(SDN)采用控制和转发的分离架构,使研究者可以通过软件实现任意的网络控制逻辑,而不需对网络设备本身进行修改,具备极强的灵活性,已经在路由决策、网络虚拟化、无线接入、云计算数据中心网络等领域得到研究和应用,成为一项热点技术。但SDN在蓬勃发展的同时,也引入了新的安全风险,带来新的安全问题。另一方面,SDN也给传统安全技术以冲击,带来创新的网络安全应用发展的机会。鉴于此,结合SDN网络架构的特点综述了SDN安全的研究现状,包括SDN安全风险分析和安全技术及应用,并思考了SDN对信息安全的意义。SDN（ Software Defined Networking）, an instance of control and forwarding separation network architecture, enables researchers to use software in realizing any network control logic without modifying net- work equipments itself. For its strong flexibility, SDN is developed and applied in the fields of routing deci- sion, networking virtualization, wireless access and cloud datacenter. As a hot technology, SDN also brings about security risks and problems while receiving fast development. Meanwhile, SDN exerts some impact on traditional network security technologies and brings so many opportunities for development of creative network security applications. In view of the features of SDN network framework, SDN security is discussed, inclu- ding SDN security risks and applications, as well as the importance of SDN to information security.

关 键 词：SDN Openlow 网络安全 控制转发分离 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]