Method for detecting lightweight network traffic abnormality for software defined network

A network traffic, software-oriented technology, applied in the field of network communication, can solve the problems of rising computing resource overhead, large computing resource consumption, network network congestion, etc., to achieve cost optimization, reduce computing resource overhead, and reduce traffic load.

Active Publication Date: 2017-10-10
安捷光通科技成都有限公司
View PDF5 Cites 5 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

On the one hand, this method needs to obtain a large number of network packets, which may easily lead to problems such as network congestion, increased delay, and increased packet loss rate; on the other hand, this method requires a large amount of computing resources, resulting in a sharp increase in computing resource overhead
Therefore, the above-mentioned network traffic anomaly detection method has inevitable defects.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for detecting lightweight network traffic abnormality for software defined network

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0023] The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. figure 1 A flow chart of a software-defined network-oriented lightweight network traffic anomaly detection method in an embodiment of the present invention is shown, and the specific steps are:

[0024] Step 1: After the network initialization is completed, set up on the controller a counter c1 for counting the number of packet-in messages sent by all switches in the network, and count the different protocols (TCP, UDP, ICMP, ARP) encapsulated in the packet-in messages The dictionary d1 of the number of packets, the dictionary d2 of which switch the packet-in message comes from, and the parameter values ​​​​of c1, d1, and d2 are initialized to 0 at the same time, and the current time t0 is recorded;

[0025] Step 2: The controller parses the packet-in message, extracts the message type msg_type encapsulated by the packet-in message and ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method for detecting lightweight network traffic abnormality for a software defined network. The method detects a network traffic abnormality phenomenon for the software defined network by analyzing packet-in messages received through a controller, and comprises the following steps of firstly parsing the packet-in messages, calculating arrival speeds of the packet-in messages, ratios of the packet-in messages sent by each exchanger, ratios of message protocol types encapsulated in the packet-in messages, and message arrival speeds of different protocols encapsulated in the packet-in messages, and then utilizing a cluster-based outlier technique to detect the above characteristics of the packet-in messages so as to judge whether or not network traffic is normal. The method for detecting lightweight network traffic abnormality for a software defined network can quickly detect the traffic abnormality in the software defined network.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a software-defined network-oriented lightweight network traffic anomaly detection method. Background technique [0002] With the continuous advancement of computer network technology, the issue of network security has also been paid more and more attention by users and network service providers. As an important technology in network security, network traffic anomaly detection technology plays an important role in preventing network attacks. The current network traffic anomaly detection technology usually captures communication packets in the network by mirroring traffic or periodic sampling, and then analyzes the captured communication packets to detect whether the network traffic is abnormal. [0003] Both of the above two methods need to obtain all network packets in the network for detection by the network traffic anomaly detection algorithm. On the one hand, t...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/1425
Inventor 闫连山崔允贺李赛飞李洪赭
Owner 安捷光通科技成都有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap