基于区块链的SDN多控制器安全认证研究  

Research on blockchain-based security authentication for multiple controllers in Software Defined Network

作　　者：任瑞峰 顾瑞春[1] REN Ruifeng;GU Ruichun(Digital and Intelligent Industry School,Inner Mongolia University of Science and Technology,Baotou 014010,China)

机构地区：[1]内蒙古科技大学数智产业学院(网络安全学院),内蒙古包头014010

出　　处：《内蒙古科技大学学报》2024年第3期282-287,共6页Journal of Inner Mongolia University of Science and Technology

基　　金：内蒙古自然科学基金(2021LHMS06003);内蒙古高校基本科研业务费项目。

摘　　要：提出一种基于区块链的软件定义网络多控制器安全认证方案。在多控制器结构基础上设计了基于区块链的共识机制,以此解决单点故障及多控制器间数据不一致的问题。通过集成无密钥签名基础设施和工作量证明共识算法,提出一种签名验证机制,保障控制器与交换机间的通信免受恶意攻击。通过在仿真实验中对吞吐量、CPU使用率和响应时间等性能指标与单控制器模型进行对比,得出的评估结果表明:本方案具有较高的传输、计算能力,可扩展性和安全性高等优点,对SDN网络整体的安全具有十分重要的研究意义。A blockchain-based multiple controller security authentication mechanism for Software-Defined Network is proposed.A blockchain-based consensus mechanism is designed on the basis of the multi-controller structure as a solution to the problems of single point of failure and data inconsistency among multiple controllers.In addition,a Keyless Signature Infrastructure and Proof-of-Work consensus algorithm are integrated to propose a signature verification mechanism to safeguard the communication between controllers and switches from malicious attacks.The performance metrics,such as throughput,CPU utilization,and response time,are compared with the single controller model through simulation experiments.The evaluation results show that this scheme has the advantages of high transmission and computational capacity,scalability and security,and is of great research importance for the overall security of SDN networking.

关 键 词：软件定义网络 区块链 无密钥签名基础设施 工作量证明 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]