软件定义网络安全问题研究综述  

Survey on Software Defined Networks Security

作　　者：董仕[1] DONG Shi(School of Computer Science and Technology,Zhoukou Normal University,Zhoukou,Henan 466001,China)

机构地区：[1]周口师范学院计算机科学与技术学院,河南周口466001

出　　处：《计算机科学》2021年第3期295-306,共12页Computer Science

基　　金：河南省科技攻关项目(192102210125)。

摘　　要：软件定义网络是一种新型的网络体系结构,其通过OpenFlow技术来实现网络控制面与数据面的分离,从而达到对网络流量的灵活控制,目前已成为下一代互联网的研究热点。随着SDN的发展及广泛应用,其安全问题已成为亟待解决的重要研究内容。近年来,国内外学者在SDN安全研究领域取得了一定的成果,文中针对SDN的3层架构分别对各层所面临的安全问题及其解决方案进行了系统总结。首先给出了SDN的定义和3层框架;接着依次总结了数据层、控制层和应用层的安全问题以及相应的解决方案;然后分析并讨论了传统网络安全与SDN安全的异同;最后对软件定义网络安全问题未来研究可能面临的挑战进行了展望。Software-defined networks(SDN)is a new network architecture,which enables separate network control plane from data planes through OpenFlow technology,thus the network traffic can be flexible controlled.SDN has become a hot topic in the next generation of Internet.With the development and wide application of SDN,its security problem has become an important research topic and some achievements have been made by the domestic and foreign scholars in recent years.Based on three-layer architecture of SDN,the security problems and solutions of each layer are summarized.Firstly,the definition and three frameworks of SDN are presented;then security issues and corresponding solutions are outlined under the data layer,the control layer and application layer;in next,the security of similarities and differences between traditional network and SDN are discussed;and finally,the research challenges in future are prposed.

关 键 词：软件定义网络 数据层 控制层 应用层 OpenFlow 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]