Link flooding attack detection response mechanism in software-defined network

Abstract

The invention provides a link flooding attack detection response mechanism in a software-defined network. The system comprises a potential target link identification module, a link congestion monitoring module, a flow engineering module and a malicious host identification module, and comprises the following steps: the potential target link identification module obtains a flow path in a network topology through head space analysis by an SDN controller, and analyzes and identifies a target link of an attacker in the network topology; the link congestion monitoring module is used for monitoring the identified target link of the attacker in real time; after the traffic engineering module knows the condition of a congested link, link topology information and load distribution information of a network are collected and analyzed, the congested link is relieved through multiple times of rerouting, and meanwhile source host information is recorded in the malicious host identification module toanalyze a malicious host in a source host. The link flooding attack detection response system provided by the invention can be suitable for network scenes of various scales.

Description

technical field [0001] The invention relates to the technical field of link flood attack detection and response, in particular to a link flood attack detection and response mechanism in a software-defined network. Background technique [0002] SDN (Software-Defined Networking, software-defined network) originated from the Clean Slate project of Professor Nick McKeown of Stanford University in the United States. In order to conduct experiments using large-scale real traffic and applications in the network, Professor Nick McKeown and others proposed the concept of software-defined network architecture, and on this basis, studied how to separate logic control and data forwarding, and improve network flexibility, reliability, efficiency and network security issues. The proposal of the concept of SDN has enabled various research institutes, enterprises, and manufacturers to have a clear direction for the research of next-generation networks. However, due to their own developmen...

AI Technical Summary

Problems solved by technology

However, due to their own development and different needs, each research group has added its own corresponding needs and understandings to the SDN network architecture, and the implementation methods are various and even uneven. Although this situation makes SDN more diverse and has There are many possibilities, but it also makes it difficult to unify the standards

Images