软件定义网络用户动态访问控制模型仿真  

Software Defined Network User Dynamic Access Control Model Simulation

作　　者：刘治纲[1] 肖庆汇 丁雪非[1] 罗尉平 LIU Zhi-gang;XIAO Qing-hui;DING Xue-fei;LUO Wei-ping(Nanchang Hangkong University,Nanchang Jiangxi 330063,China)

机构地区：[1]南昌航空大学,江西南昌330063

出　　处：《计算机仿真》2019年第1期308-311,396,共5页Computer Simulation

基　　金：江西省教育厅科学技术研究项目(GJJ171562)

摘　　要：对软件定义网络(SDN)用户动态访问控制进行模型构建,能够提高用户的用网安全性,对用户动态访问控制模型进行仿真,需要利用信任角色构建动态控制模型,并对软件定义网络节点进行信任度计算,而传统方法通过并行指令序列学习获取用户行为轮廓,利用前向轮廓建立全局K模型,但忽略了计算网络节点的信任度,导致控制速度慢。为此提出了一种基于角色信任的软件定义网络用户动态访问控制模型,分析软件定义网络访问的基本信任机制,并在此基础上依据网络基本要素与网络权限层级。构建控制软件定义网络用户访问的动态流程,计算软件定义网络节点信任度,通过信任角色完成对软件定义网络用户动态访问控制模型的构建。仿真结果表明,与传统RBAC模型相比,所提动态模型的访问控制响应速度更快、准确率更高,在用户识别方面更具灵活性。Traditionally,the method uses the forward contour to build global K model,but the trust degree of computing network node is ignored. Therefore,a model to control user dynamic access in software-defined network based on role trust was proposed. First of all,the basic trust mechanism of software defined network access was analyzed. Based on the basic elements of network and the level of network right,the dynamic process of user access was constructed and the trust degree of node in software-defined network was calculated. Finally,the role trust was used to build the user dynamic access control model of software-defined network. Simulation results show that,compared with traditional RBAC model,the proposed dynamic model has faster access control response and higher accuracy,which is more flexible in user recognition.

关 键 词：软件定义网络 动态访问 角色信任 控制模型 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]