SDN中基于历史信息的负反馈调度算法  

Negative feedback scheduling algorithm based on historical information in SDN

作　　者：吕迎迎 郭云飞[1] 王禛鹏 程国振[1] 王亚文[1] LYU Yingying;GUO Yunfei;WANG Zhenpeng;CHENG Guozhen;WANG Yawen(National Digital Switching System Engineering&Technological R&D Center,Zhengzhou 450002,China)

机构地区：[1]国家数字交换系统工程技术研究中心,河南郑州450002

出　　处：《网络与信息安全学报》2018年第6期45-51,共7页Chinese Journal of Network and Information Security

基　　金：国家自然科学基金创新研究群体基金资助项目(No.61521003);国家自然科学基金资助项目(No.61602509);国家重点研发计划基金资助项目(No.2016YFB0800100;No.2016YFB0800101);河南省科技攻关计划基金资助项目(No.172102210615)~~

摘　　要：在当前SDN架构中,控制器遭受着很多潜在的攻击,如恶意流规则等可能会引入虚假的流规则使主机混乱。基以此,提出一种基于历史信息的负反馈调度算法,利用假设检验对攻击者的行为进行判断,并将此作为调度的依据。仿真实验结果和分析表明,相比于传统调度方法,所提算法在一定程度上可以增加攻击者的时间成本,从而有效防御攻击者的探测攻击,而且控制器种类越多,系统越难被攻破。In the current SDN architecture,the controllers suffer from lots of potential attacks.For example,malicious flow rule attacks may introduce fake flow rules to confuse the host.A negative feedback scheduling algorithm based on historical information was proposed,in which hypothesis testing was used to judge the behavior of the attacker and the result will be used as a basis for scheduling.Simulation results and analysis show that,compared with the traditional scheduling methods,the proposed algorithm can increase the attacker’s time cost to a certain extent,so as to effectively defend the attacker’s probe attack.In addition,the more types of controllers,the more difficult it is to break the system.

关 键 词：动态异构冗余 负反馈 主动防御 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]