DDoS Attack Detection Method for Space-Based Network Based on SDN Architecture  

作　　者：JIA Min SHU Yuejie GUO Qing GAO Zihe XIE Suofei 

机构地区：[1]Communication Research Center,School of Electronics and Information Engineering,Harbin Institute of Technology,Harbin 150006,China [2]Institute of Telecommunication Satellite,China Academy of Space Technology,Beijing 100094,China

出　　处：《ZTE Communications》2020年第4期18-25,共8页中兴通讯技术（英文版）

基　　金：the National Natural Science Foundation of Chi⁃na under Grant Nos.61671183 and 61771163.

摘　　要：With the development of satellite communications,the number of satellite nodes is constantly increasing,which undoubtedly increases the difficulty of maintaining network security.Combining software defined network(SDN) with traditional space-based networks provides a new class of ideas for solving this problem.However,because of the highly centralized network management of the SDN controller,once the SDN controller is destroyed by network attacks,the network it manages will be paralyzed due to loss of control.One of the main security threats to SDN controllers is Distributed Denial of Service(DDoS) attacks,so how to detect DDoS attacks scientifically has become a hot topic among SDN security management.This paper proposes a DDoS attack detection method for space-based networks based on SDN architecture.This attack detection method combines the optimized Long Short-Term Memory(LSTM) deep learning model and Support Vector Machine(SVM),which can not only make classification judgments on the time series,but also achieve the purpose of detecting and judging through the flow characteristics of a period of time.In addition,it can reduce the detection time as well as the system burden.

关 键 词：space-based network SDN DDoS attack LSTM SVM 

分 类 号：TN927.2[电子电信—通信与信息系统] TN915.08[电子电信—信息与通信工程] TP18[自动化与计算机技术—控制理论与控制工程]