Wireless network security defense method based on software-defined security

Abstract

The invention discloses a wireless network security defense method based on software-defined security. The wireless network security defense method is based on a software-defined secure network architecture and comprises a cloud platform, an SDN controller and a wireless access point. The wireless network security defense method includes the steps: sniffing the network environment data packet in the wireless network by the wireless access point, and uploading the network environment data to the cloud platform in real time; executing the network flow table from the SDN controller to realize network defense; enabling the cloud platform to complete attack detection of the network environment data, generate a defense decision after detecting a network attack, and issue the defense decision tothe SDN controller; and enabling the SDN controller to manage and configure network forwarding equipment including the wireless access point, and issue a network flow table according to the defense decision. According to the invention, attack detection and defense automation and integration under a wireless network are realized, and the protection efficiency is improved.

Description

technical field [0001] The invention relates to a wireless network security defense method, which belongs to the field of network security. Background technique [0002] With the rapid development of the Internet, network and information technology has been more widely used, but it is also accompanied by a larger area and a wider range of network attacks. [0003] The existing detection and defense methods for wireless networks use wireless sniffing devices deployed in the network environment to sniff the environmental data, rely on the expert rule base to detect whether there is an attack on the network environment data, determine the location of the network attack, and then manually or other network tools The network defends. Existing methods rely on the deployment of network sniffing devices in the network, and cannot detect network attacks outside the scope of deployment; in addition, existing methods often only focus on network monitoring and detection, and cannot perf...

AI Technical Summary

Problems solved by technology

Existing methods rely on the deployment of network sniffing devices in the network, and cannot detect network attacks outside the scope of deployment; in addition, existing methods often only focus on network monitoring and detection, and cannot perform automated network defense after an attack is detected , the protection efficiency is low in actual deployment

Images