CNN-based network authentication method and system

Abstract

The invention provides a CNN-based network authentication method and system. The method comprises the following steps: establishing a security encryption channel between a controller and a switch, adding a trusted authority CA to authenticate and sign the controller and the switch, realizing bidirectional authentication between the controller and the switch, and performing key negotiation betweenthe controller and the switch to realize targeted improvement of SDN network vulnerability; by improving a convolutional neural network CNN analysis model, the pooling operation defect of a traditional CNN model is overcome.

Description

Technical field [0001] This application relates to the field of network security technology, and in particular to a CNN-based network authentication method and system. Background technique [0002] In the existing SDN network, the TLS security channel is not compulsorily established between the controller and the switch, and the default state is not open, which makes the network fragile. There may be clear text communication between the controller and the switch, and any third party can intercept it. Or modify the content of the communication between the two parties, which is vulnerable to man-in-the-middle attacks. The lack of certificate verification between the controller and the switch makes it easy for an attacker to intercept the request sent by the controller to the switch and pretend to be the controller to communicate with the switch, thereby obtaining all the content of the communication between the switch and the controller. [0003] At the same time, the characteristic...

AI Technical Summary

Problems solved by technology

[0003] At the same time, the characteristics of some layers in the convolutional neural network CNN used in the SDN network system are not suitable for learning network traffic, and the characteristics of its pooling operation are not conducive to traffic analysis

Images