Improved network authentication detection method and system

Abstract

The invention provides an improved network authentication detection method and system. The method comprises the following steps: establishing a security encryption channel between a controller and a switch, adding a trusted authority CA to authenticate and sign the controller and the switch, realizing bidirectional authentication between the controller and the switch, and performing key negotiation between the controller and the switch to realize targeted improvement of SDN network vulnerability; meanwhile, analyzing and constructinga noise simulation network attack model; training the noise simulation network attack model by using real network attack traffic, and after the noise simulation network attack model is trained, accessing the noise simulation network attack model to amachine learning module to serve as a simulation attack source of the machine learning module to attack and train the machine learning module uninterruptedly, thereby helping to improve the detection capabilityof the machine learning module.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to an improved network authentication detection method and system. Background technique [0002] In the existing SDN network, it is not mandatory to establish a TLS security channel between the controller and the switch, and the default state is disabled, which makes the network vulnerable, and there may be clear text communication between the controller and the switch, which can be intercepted by any third party Or modify the communication content between the two parties, which is vulnerable to man-in-the-middle attacks. There is no certificate verification between the controller and the switch. Attackers can easily intercept the request sent by the controller to the switch, pretend to be the controller to communicate with the switch, and obtain all the communication content between the switch and the controller. [0003] At the same time, a new network attack d...

AI Technical Summary

Problems solved by technology

[0002] In the existing SDN network, it is not mandatory to establish a TLS security channel between the controller and the switch, and the default state is disabled, which makes the network vulnerable, and there may be clear text communication between the controller and the switch, which can be intercepted by any third party Or modify the content of communication between the two parties, which is vulnerable to man-in-the-middle attacks

Images