SDN网络DDoS泛洪攻击的被动防御措施研究  

Research on Passive Defense Measures of DDoS Flood Attack in SDN Network

作　　者：廖小群[1] 黄华东 LIAO Xiaoqun;HUANG Huadong(Guangxi Vocational and Technical College of International Business,Nanning 530007,China)

机构地区：[1]广西国际商务职业技术学院,广西南宁530007

出　　处：《现代信息科技》2022年第6期97-99,103,共4页Modern Information Technology

基　　金：2021年度广西高校中青年教师科研基础能力提升项目(2021KY1251)。

摘　　要：分布式拒绝服务DDoS攻击是当前网络中主要的黑客攻击方式,严重危害高职院校网络安全,给学校带来不少损失。SDN(软件定义网络)是一种将数据平面和控制平面分离的新的网络体系结构,普遍应用于云计算环境中。SDN网络的控制和决策完全集中在控制器上,这使其容易受到DDoS攻击。文章先是分析SDN网络架构的原理和特征,然后创建一个SDN仿真实验环境来模拟网络主机遭受泛洪式DDoS攻击的情况,最后提出了有效的检测和防御方法。Distributed denial of service DDoS attack is the main hacker attack mode in the current network,which seriously endangers the network security of higher vocational colleges and brings a lot of losses to the school.SDN(Software Defined Network)is a new network system architecture that separates data plane and control plane.It is widely used in cloud computing environment.The control and decision-making of SDN network are completely concentrated on the controller,which makes it vulnerable to DDoS attacks.This paper first analyzes the principle and characteristics of SDN network architecture,then creates an SDN simulation experiment environment to simulate the situation of network host suffering from flood DDoS attack,and finally puts forward effective detection and defense methods.

关 键 词：高校 SDN DDOS 网络安全 泛洪攻击 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]