Linux环境下基于SDN的网络通信安全策略研究  

Research on Network Communication Security Strategy Based on SDN in Linux Environment

作　　者：贺琦雯 欧阳剑 HE Qiwen;OUYANG Jian(Zhengzhou Vocational College of Information Engineering,Zhengzhou 450000,China)

机构地区：[1]郑州信息工程职业学院,河南郑州450000

出　　处：《通信电源技术》2024年第22期156-158,共3页Telecom Power Technology

摘　　要：随着软件定义网络(Software Defined Network,SDN)技术在Linux环境下的广泛应用,其灵活性与可编程性为网络通信安全带来了新的挑战。从Linux环境下的SDN架构入手,剖析其核心组件与关键技术,并深入探讨SDN环境下网络通信安全面临的主要挑战,如控制平面与数据平面分离导致的安全风险、集中式控制器的脆弱性以及开放式应用程序编程接口(Application Programming Interface,API)的攻击面扩大等。在此基础上,提出一系列针对性的安全策略,包括基于角色的访问控制机制、细粒度的流表管理方案、多控制器协同防御框架以及北向接口的安全增强措施。With the wide application of Software Defined Network(SDN)technology in Linux environment,its flexibility and programmability bring new challenges to network communication security.This paper starts with SDN architecture in Linux environment,analyzes its core components and key technologies,and deeply discusses the main challenges faced by network communication security in SDN environment,such as the security risk caused by the separation of control plane and data plane,the vulnerability of centralized controller and the expansion of attack surface of open Application Programming Interface(API).On this basis,this paper proposes a series of targeted security policies,including role-based access control mechanism,fine-grained flow table management scheme,multicontroller cooperative defense framework and northbound interface security enhancement measures.

关 键 词：LINUX 软件定义网络(SDN) 网络通信安全 安全策略 

分 类 号：TN915.0[电子电信—通信与信息系统]