A method, device, and user terminal for processing abnormal traffic in an SDN framework
A technology of abnormal traffic and processing method, which is applied in the field of devices and user terminals, and abnormal traffic processing method, which can solve problems such as hidden dangers in network use, inconvenience, and lack of coping mechanisms, so as to prevent loss of control and paralysis, facilitate use, and enhance security Effect
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0054] refer to figure 2 , the first embodiment of the present invention provides a method for processing abnormal traffic in an SDN framework, including:
[0055] Step S10, analyzing the data flow of the message to obtain the analysis data information;
[0056] As mentioned above, what needs to be understood is that Software Defined Network (Software Defined Network, SDN) is a new network innovation framework of Emulex network and a way to realize network virtualization. Its core technology, OpenFlow, combines the control plane of network equipment with data The plane is separated, so that the flexible control of network traffic is realized, and the network becomes more intelligent as a pipe.
[0057] As mentioned above, it should be understood that a message (message) is a data unit exchanged and transmitted in the network, that is, a data block to be sent by a station at one time. The message contains the complete data information to be sent, and its length is very incon...
Embodiment 2
[0066] refer to image 3 , the second embodiment of the present invention provides a method for processing abnormal traffic in an SDN framework, based on the above figure 2 In the first embodiment shown, the step S30 "if the result of the traffic inspection is that the parsed data information is abnormal traffic, then process the message corresponding to the abnormal traffic according to the preset abnormal traffic template library" include:
[0067] Step S31, if the result of the traffic inspection is that the analyzed data information is abnormal traffic, then judge whether the analyzed data information is high-risk abnormal traffic according to the abnormal traffic template library;
[0068] As mentioned above, in this embodiment, different processing is performed on the detected abnormal traffic for different traffic inspection results of traffic processing. After it is judged as abnormal traffic, the hazard level of the analysis data information of the message is confi...
Embodiment 3
[0076] refer to Figure 4 , the third embodiment of the present invention provides a method for processing abnormal traffic in an SDN framework, based on the above image 3 In the second embodiment shown, the step S33 "If the analyzed data information is not the high-risk abnormal traffic, send a prompt message corresponding to the analyzed data information to the external security APP, so as to facilitate the analysis according to the external After processing the message corresponding to the parsed data information in the decision information returned by the security APP to the prompt information, it also includes:
[0077] Step S34, obtaining the decision information returned by the external security APP according to the prompt information;
[0078] As mentioned above, the decision information is the received data information of the processing decision returned by the user according to the prompt information.
[0079] Step S35, converting the decision information into tra...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More