Network authentication attack prediction method and system

Abstract

The invention provides a network authentication attack prediction method and system. The method comprises the following steps: establishing a security encryption channel between a controller and a switch, adding a trusted authority CA to authenticate and sign the controller and the switch, realizing bidirectional authentication between the controller and the switch, and performing key negotiationbetween the controller and the switch to realize targeted improvement of SDN network vulnerability; meanwhile, collecting data fragment copies; extracting available attack vectors; and analyzing whether the data fragments are abnormal or not and whether the plurality of abnormal data fragments are logically associated or not, thereby determining abnormal points, obtaining potential attack trajectories and security vulnerabilities of the network nodes, predicting whether the abnormal network nodes are improved in the future or not, and predicting whether other nodes similar to the network nodesare attacked or not.

Description

Technical field [0001] This application relates to the field of network security technology, and in particular to a network authentication attack prediction method and system. Background technique [0002] In the existing SDN network, the TLS security channel is not compulsorily established between the controller and the switch, and the default state is not open, which makes the network fragile. There may be clear text communication between the controller and the switch, and any third party can intercept it. Or modify the content of the communication between the two parties, which is vulnerable to man-in-the-middle attacks. There is a lack of certificate verification between the controller and the switch. The attacker can easily intercept the request sent by the controller to the switch and pretend to communicate with the switch as the controller to obtain all the content of the communication between the switch and the controller. [0003] At the same time, the reasons for the abn...

AI Technical Summary

Problems solved by technology

[0002] In the existing SDN network, it is not mandatory to establish a TLS security channel between the controller and the switch, and the default state is disabled, which makes the network vulnerable, and there may be clear text communication between the controller and the switch, which can be intercepted by any third party Or modify the content of communication between the two parties, which is vulnerable to man-in-the-middle attacks

Images