软件定义网络中基于加密的端口跳变技术研究  

RESEARCH ON ENCRYPTION-BASED PORT HOPPING IN SOFTWARE DEFINED NETWORK

作　　者：赵子郁 郭渊博[1,2] 刘伟 

机构地区：[1]信息工程大学先进计算国家重点实验室,河南郑州450001 [2]信息控制和安全技术重点实验室,浙江嘉兴314033

出　　处：《计算机应用与软件》2017年第4期322-328,共7页Computer Applications and Software

基　　金：国家自然科学基金项目(61309016);国家重点基础研究发展计划基金项目(2012CB315901;2013CB329104)

摘　　要：针对软件定义网络中拒绝服务攻击问题,在其控制平面提出了加密的端口跳变解决方案。利用软件定义网络集中控制可编程特性,提出了改进的加密端口跳变策略,保证了从端口生成初期到通信过程的安全性,并采用基于Ack的同步技术保证了通信过程的连续性。理论结合实验表明,端口跳变技术在OpenFlow实验平台上实现简单,改进的加密算法安全性高,是基于软件定义网络的轻量级端口跳变策略。Aiming at the DoS attack in software defined network, an encryption-based port hopping solution is proposed in its control plane. Using software to define the control programmability of the centralized network, an improved encryption port hopping strategy is proposed to ensure the security from the initial port generation to the communication process. We also use Ack-based synchronization technology to ensure the continuity of the communication process. Theory combined with the experimental results show that the port hopping technology is simple and improved on the OpenFlow experimental platform, and it is a lightweight port hopping strategy based on software defined network.

关 键 词：软件定义网络 端口跳变 加密算法 认证 基于Ack同步 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]