软件定义网络安全研究进展  

Advances in software defined network security research and key technologies

作　　者：翟亚红[1] 崔峻玮 ZHAI Yahong;CUI Junwei(College of Electrical and Information Engineering,Hubei University of Automobile Technology,Shiyan 442002,China)

机构地区：[1]湖北汽车工业学院电气与信息工程学院,十堰442002

出　　处：《科技导报》2023年第13期76-88,共13页Science & Technology Review

基　　金：湖北省教育厅科研计划重点项目(D20211802)。

摘　　要：软件定义网络(software defined networks,SDN)是一种新型的网络体系架构,通过集中式面向软件的管理方法,简化了新应用和服务的开发,目前已成为下一代互联网的研究热点。为了解决SDN中存在的安全问题,从SDN的3层架构方面综述了现有解决方案,分析了SDN安全问题上所面临的技术挑战。介绍了SDN的概念和3层架构,梳理了SDN的相关安全问题,依次总结了应用层、控制层和数据层中存在的安全问题和解决方案,展望了SDN安全问题未来研究可能面临的挑战。Software-defined networking(SDN)is a new network architecture that simplifies the development of new applications and services through a centralized software-oriented management approach and has become a research hotspot for the nextgeneration Internet.To address the security issues in SDN,this paper reviews the existing solutions in terms of the 3-layer architecture of SDN and analyzes the technical challenges faced by SDN security.In particular,it firstly introduces the definition of SDN and the 3-layer architecture then reviews the research advances on security related to SDN.Next,it summarises the security issues and solutions to the application layer,control layer and data layer,respectively.Finally,it provides an outlook on the challenges that SDN security future research may encounter.

关 键 词：软件定义网络 OpenFlow技术 网络安全 安全威胁 安全对策 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]