软件定义网络安全研究综述  

An Overview of Software-defined Network Security Research

作　　者：徐丽[1] 刘畅[1] 李思照 XU Li;LIU Chang;LI Sizhao(Harbin Engineering University,Harbin 150001,China)

机构地区：[1]哈尔滨工程大学,黑龙江哈尔滨150001

出　　处：《计算机与网络》2022年第10期54-59,共6页Computer & Network

摘　　要：软件定义网络(SDN)是一种新型的网络架构,其利用OpenFlow协议实现了控制层与数据层的高度离散化,提高了网络流量控制的灵敏性,为互联网变革提供了新的研究方向。然而,随着SDN的广泛应用,其安全问题逐渐制约着SDN技术的发展。旨在介绍SDN架构的发展背景及现状,并简要分析其内部结构及工作原理;对SDN基于传统网络的安全优势进行简要阐述;根据其各层特点详细分析可能存在的安全问题,并对未来网络的安全研究方向做出展望。Software-Defined Network(SDN)is a new type of network architecture,which uses the OpenFlow protocol to achieve a high degree of discretization of the control layer and the data layer,improves the sensitivity of network traffic control,and provides a new research direction for the transformation of the Internet.With the widespread adoption of SDN,the security concerns,however,are gradually constraining the development of SDN technology.The development background and current situation of SDN architecture are introduced,and its internal structure and working theory are briefly analyzed.Then,the security advantages of SDN based on traditional network are briefly described.Finally,based on the peculiarities of each layer,the potential security problems are analyzed in detail,and the future research direction of network security is prospected.

关 键 词：软件定义网络 网络虚拟化 OpenFlow 网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]