Mixed packet marking traceability system and method applicable to SDN (Software Defined Networking) network

Abstract

The invention discloses a mixed packet marking traceability system and a method applicable to a SDN (Software Defined Networking) network. The system comprises a regional agent module, an exception detection module, a data processing module and a traceability management module, wherein the data processing module is the core of the whole system and is used for determining the marking method and the marking process for related data packets; the regional agent module is used for generating a switch mapping table and providing marking information basis for data packet marking fields; the exception detection module is mainly used for carrying out behavior analysis on forwarded data packets and providing a judgment on whether to select to call a data marking module; and the traceability management module mainly selects and analyzes marking information on the data packets by the data processing module and reconstructs forwarding paths of certain data packets and performs visual display. The traceability accuracy is enhanced, the traceability efficiency is quickened, good traceability effects are realized especially for malicious packet attacks, and good conditions are provided for deployment of subsequent other related security mechanisms such as a network firewall and traffic filtering.

Description

technical field [0001] The present invention relates to the field of data traceability, especially the field of data traceability under SDN network, and specifically refers to a hybrid packet mark traceability system applicable to SDN network. Hybrid packet marking mainly refers to packet marking and logging techniques. Background technique [0002] SDN (Software Defined Networking) is a new type of network architecture. In order to solve the traditional network's difficulty in meeting the flexible resource requirements of cloud computing, big data, and related services, SDN proposes to separate the control plane from the data plane. The concept supports centralized network status control and realizes the transparency of the underlying network facilities to the upper-layer applications. The emergence of SDN enables network technical workers (including network managers, researchers, network service providers, etc.) to configure and manage networks more flexibly and convenien...

AI Technical Summary

Problems solved by technology

In order to deal with such threats and improve the robustness of SDN controllers, most of the current research focuses on defense and detection. However, when an attack occurs, these technologies cannot locate the source of the attack and effectively mitigate and suppress the attack.

Images