SDN南向通道的安全性研究  

The Research on Security of SDN South Interface

作　　者：范晓红[1] 吕泽正 鞠磊[1] 

机构地区：[1]北京电子科技学院通信工程系,北京100070

出　　处：《北京电子科技学院学报》2016年第4期15-20,共6页Journal of Beijing Electronic Science And Technology Institute

基　　金：中央高校基本科研业务费专项资金资助

摘　　要：软件定义网络(SDN)技术分离了网络的控制平面和数据平面,有效地解决了网络安全管理和控制问题,然而SDN自身安全性也尚有诸多问题需要解决。本文在分析SDN架构及其安全性的基础上,针对南向通道安全进行了研究,并基于OTR协议给出了一种安全解决方法。该方法具有前向安全性、安全认证等特性,对于SDN环境中的安全身份认证、密钥安全保存以及SDN组件隐蔽保护等问题提供了较好的解决方案。The control plane and data plane are decoupled in SDN, which provides a new solution for network security management and control problems. However, there are still considerable issues presen- ted by itself remaining to be solved. The architecture and security of SDN are analyzed in this paper. Based on OTR protocol, a secure solution of south channel is proposed. The method has the forward security and safety certification characteristics, which can give a solution to the SDN for the security of authentication, key security save and SDN component hidden protection.

关 键 词：SDN OTR前向安全 OpenFlow 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]