一种基于软件定义网络的通信网络保护方法  

A Communication Network Protection Method Based on Software-Defined Network

作　　者：龙勇 杨国军[2] LONG Yong;YANG Guojun(Mianyang Radio and TV University,Mianyang Sichuan 621000,China;Neijiang Normal University,College of Computer Science,Neijiang Sichuan 641100,China)

机构地区：[1]绵阳广播电视大学,四川绵阳621000 [2]内江师范学院计算机学院,四川内江641100

出　　处：《电子器件》2019年第6期1564-1568,共5页Chinese Journal of Electron Devices

摘　　要：为了应对互联网数据传输过程中的分布式拒绝服务攻击(DDoS),提高互联网数据传输的安全性,通过对SYN泛洪攻击机理进行分析研究,提出应对SYN泛洪攻击较为有效的软件定义网络(SDN)防御机制,分析其防御机理,建立SDN信息熵计算模型,并构建了实际仿真计算实验环境。研究结果证明SDN能够较为快速有效的对SYN泛洪攻击进行防御,同时能够对类似于SYN攻击的其他DDoS攻击进行有效防御。In order to deal with distributed denial-of-service attacks(DDoS)in the process of Internet data transmission and improve the security of Internet data transmission,the mechanism of SYN(Synchronize Sequence Number)flooding attack was analyzed and studied,and a more effective defense mechanism of SDN(Software Defined Network)against SYN flooding attack was proposed.The defense mechanism of SDN was analyzed,the calculation model of SDN information entropy was established,and the actual simulation calculation results were constructed.The results showed that SDN can defend against SYN flooding attack quickly and effectively,and also can defend against other DDoS attacks similar to SYN attack.

关 键 词：分布式拒绝服务攻击 SYN泛洪攻击 软件定义网络 信息熵计算 

分 类 号：TN915.8[电子电信—通信与信息系统]