A method and system for secure traffic collection based on SDN

Abstract

The invention discloses an SDN-based flow security collection method and system. The method includes connecting an SDN switch between a network terminal and an external network in a transparent transmission manner; the SDN controller uses part or all of the SDN switches as collection points, The collection protocol is randomly selected from the traffic collection protocol library, and the corresponding forwarding and data processing rules are issued to all SDN switches. Transmission and forwarding The SDN switch is only used to forward data; the SDN controller performs port mirroring on the traffic of the network terminal and the external network, encrypts the traffic and transmits it; the SDN switch at the collection point or the forwarding SDN switch judges according to the virtual node to which the traffic points, Pass the traffic to the collection server. The present invention is based on the programmable characteristics of SDN, and greatly enhances the security of data transmission and the security of collection servers based on self-defined protocols, virtual nodes and other methods.

Description

technical field [0001] The present invention relates to the communication field, in particular to an SDN-based traffic security collection method and system. Background technique [0002] At present, analyzing the network status through traffic collection technology has become an important means of automatic network operation and maintenance and network security threat detection. Insufficient security defenses, facing security threats such as man-in-the-middle attacks, data theft, and DoS / DDoS attacks. For example, the existing traffic security collection method: network traffic collection method, system and server (application number: CN201510861219.5, application date: 2015.12.01), by introducing traffic identification for policy judgment, this scheme can introduce certain security features, However, due to the lack of encryption and other means, there are risks such as theft and tampering of data; the network traffic collection and analysis system based on microservice c...

AI Technical Summary

Problems solved by technology

[0003] Aiming at the security problems faced by the existing traffic collection methods, the present invention proposes a traffic security collection method and system based on SDN (Software Defined Networking)

Images