SDN环境下基于BP神经网络的DDoS攻击检测方法  

DDo S attack detection based on BPNN in software defined networks

作　　者：王晓瑞 庄雷[1] 胡颖[1] 王国卿[1] 马丁[1,2] 景晨凯 Wang Xiaorui;Zhuang Lei;Hu Ying;Wang Guoqing;Ma Ding;Jing Chenkai(School of Information Engineering,Zhengzhou University,Zhengzhou 450001,China;College of Information Science&Engineering,Henan University of Technology,Zhengzhou 450001,China)

机构地区：[1]郑州大学信息工程学院,郑州450001 [2]河南工业大学信息科学与工程学院,郑州450001

出　　处：《计算机应用研究》2018年第3期911-915,共5页Application Research of Computers

基　　金：国家"973"计划资助项目(2012CB315901);国家自然科学基金资助项目(61379079);河南省科技攻关项目(122102210042)

摘　　要：软件定义网络是一种全新的网络架构,集中控制是其主要优势,但若受到DDo S攻击则会造成信息不可达,也容易造成单点失效。为了有效地识别DDo S攻击,提出了一种SDN环境下基于BP神经网络的DDo S攻击检测方法。该方法获取Open Flow交换机的流表项,分析SDN环境下DDo S攻击特性,提取出与攻击相关的流表匹配成功率、流表项速率等六个重要特征;通过分析六个相关特征值的变化,采用BP神经网络算法对训练样本进行分类,实现对DDo S攻击的检测。实验结果表明,该方法在有效提高识别率的同时,降低了检测时间。通过在软件定义网络环境中的部署,验证了该方法的有效性。Software definition network is a new network architecture that achieves a centralized network control.Although centralized control is the main advantage of SDN,but if subject to DDoS attacks,the information will be not reachable,it also likely to cause a single point of failure.In order to mitigate this threat,this paper proposed a DDoS attack detection method based on SDN centralized control.This algorithm obtained the flow table items of OpenFlow switch,analyzed the characteristics of DDoS attacks in SDN environment,and extracted six characteristics related to attacks.By analyzing the changes of the six eigenvalues,it used BP neural network algorithm to classify the training samples to achieve the DDoS attack detection.The experimental results show that the method can improve the recognition rate and reduce the detection time.The effectiveness of the method is verified by the deployment in a software-defined network environment.

关 键 词：软件定义网络 分布式拒绝服务攻击 反向传播神经网络 特征值 攻击检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]