A method and system for defending chaos moving targets based on SDN

Abstract

The invention discloses a Chaos moving target defense method based on an SDN and a system thereof. Confusion and dynamic change functions of a network system for requesters can be realized by utilizing a Chaos tower algorithm, a confusion defense method and a random IP defense method. Therefore, a Chaos tower structure is designed by the system to grade the hosts of the network according to degree of importance. Confusion defense performs grade confusion on illegal access, and confusion of return information is performed according to the confusion index so that attackers are enabled to receive false information; and when the confusion index excessively high, communication is directly blocked out. Random IP defense is performed on legal flow network access, and flow tables are periodically issued via a controller to perform IP random conversion on legal communication in an intranet environment. Network equipment in the area has extremely high anonymity and fluctuation under the condition of guaranteeing normal information exchange efficiency so that probing of intruders can be defended, attack range is widened and attack cost is increased.

Description

Technical field [0001] The invention belongs to the field of Internet technology, and in particular relates to a new SDN-based Chaos mobile target defense method and system. Background technique [0002] Intranet security has become a new hot spot in information security. Survey data shows that 63.6% of enterprise users in my country are at a "high risk" level, and the annual economic loss caused by network leaks is as high as tens of billions. Although most companies attach great importance to internal network security management issues, and investment in internal network security is increasing, internal network security is still severe. [0003] Today's corporate intranets are mostly built on static systems, so those intranet attack tools are also tailor-made for static networks, such as Nmap, worms, Cain, etc. Moreover, the cost of intranet security defense is seriously unequal to the efforts of malicious attackers to break through the network. Intranet defenders often need to...

AI Technical Summary

Problems solved by technology

[0006] Since the above-mentioned schemes implement consistent obfuscation protection for all host communications in the intranet, for an enterprise, the flexibility to defend against malicious attackers is lacking, and it is easy to attract the attention of malicious attackers

Images