Secure flow filter and filtering method based on software defined network (SDN) controller

Abstract

The invention relates to the fields of computer technologies and networks, in particular to a secure flow filter and a filtering method based on a software defined network (SDN) controller. Before various unknown flow information is written into a flow table of the SDN controller, the secure flow filter can be established at a location through which the flow passes, and is used for analyzing and processing the flow and identifying various attacks or sniffing the flow in order to ensure the validity of data in the flow table and overcome defects caused by a firewall. The secure flow filter is transparent to an existing network; network elements and architecture of the existing network do not need to be modified; extremely-high flow filtering efficiency is achieved through use of a DPDK driver; and the network performance is not influenced. Through adoption of the secure flow filter and the filtering method, the security of the whole network is enhanced at minimum investment on the premise of not modifying the existing SDN network.

Description

technical field [0001] The invention relates to computer technology and network fields, in particular to software-defined network (SDN) and network security control fields. Background technique [0002] It's easy to overlook security concerns when it comes to innovative new technologies. The inventor noticed several security issues when deploying SDN, which made SDN technology face many challenges, such as malicious data flow, switch flow table tampering, application loopholes, data management confidentiality and availability threats, etc., which are common in traditional networks Attacks still exist in SDN networks. Most of the security concerns of SDN revolve around the controller itself, which can be thought of as the switching / routing "brain" that allows the control plane from each system to be managed centrally. Once the controller fails, the entire network will collapse. For security managers, the biggest challenge of SDN is securing controllers at all costs. Now t...

AI Technical Summary

Problems solved by technology

[0006] Since most of the technologies used in the security management of SDN networks are similar to those of traditional networks, there is no technology and equipment specially designed for SDN network protection, and traditional technologies are too complex and redundant, and the maintenance cost is also very high. At present, the SDN network does not have a considerable scale, and the application degree is not high.

As the security issues of SDN networks become more and more prominent, various security protocols for SDN networks will continue to emerge. Traditional security technologies have insufficient scalability and lose the essence of Software Define.

Images