SDN controller end system based on intrusion tolerance and safety communication method

An intrusion tolerance and controller technology, applied in the field of secure communication, can solve the problems of unpredictable security attack methods, difficulty in ensuring the security of SDN controllers, etc., and achieve the effect of good scalability

Active Publication Date: 2015-11-18
INST OF INFORMATION ENG CAS
View PDF3 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Under the existing deployment mode and security means, it is difficult to guarantee the security of the SDN controller due to the unpredictability of security attacks
[0004] The root of the above problems lies in the unpredictability of ...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • SDN controller end system based on intrusion tolerance and safety communication method
  • SDN controller end system based on intrusion tolerance and safety communication method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0020] In order to make the above objects, features and advantages of the present invention more obvious and understandable, the present invention will be further described below through specific embodiments and accompanying drawings.

[0021] figure 1 It is an architecture diagram of the SDN controller end system based on intrusion tolerance of the present invention. Such as figure 1 As shown, the pre-agent group is located before the SDN controller group, receives the Openflow message (request message) from the switch before the controller, and then copies and forwards it to the SDN controller group; receives the message from the SDN controller before the switch The Openflow message (response message), analyze and compare the flow rules in it, and forward the Openflow message containing the intrusion tolerance policy to the switch. figure 2 Schematic diagram of processing Openflow messages for front-end agents.

[0022] The intrusion tolerance in the above scheme depends...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The present invention relates to an SDN controller end system based on an intrusion tolerance and a safety communication method. The system comprises an SDN controller group, a switch and at least one pre-proxy between the SDN controller group and the switch. The pre-proxy is responsible for sending the Openflow request message emitted by the switch to multiple SDN controllers in the SDN controller group, extracting the flow rule in the Openflow reply message emitted by each SDN controller, comparing the extracted flow rule, and forwarding a correct Openflow reply message to the switch if a comparison result satisfies a preset intrusion tolerance policy. According to the SDN controller end system and the safety communication method, the availability and reliability of the SDN controllers can be improved, and a security guarantee is provided for an SDN network.

Description

technical field [0001] The present invention relates to the field of SDN security. More specifically, the present invention relates to an SDN controller end system with intrusion tolerance capability based on a front agent group and an SDN controller group, and a secure communication method using the system to improve the availability of the SDN controller and reliability, providing security assurance for SDN networks. Background technique [0002] SDN network (Software Defined Network, software-defined network) is a new network innovation architecture, and its core technology OpenFlow realizes flexible control of network traffic by separating the control plane of network equipment from the data plane. Compared with traditional networks, SDN networks have three basic features: one is the separation of control and forwarding, the forwarding plane is composed of controlled forwarding devices, and the forwarding mode and business logic are determined by the control application...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06
CPCH04L63/0281H04L63/1425
Inventor 黄亮姜帆荀浩马多贺王利明徐震
Owner INST OF INFORMATION ENG CAS
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap