Service path verification method for mimicry configuration in mimicry defense

Abstract

The invention discloses a service path verification method for mimicry configuration in mimicry defense. The method disclosed in the invention comprises the following steps sharing a polynomial algorithm according to the secret of Shanmir via a controller; generating a polynomial for each service path, generating a corresponding switch path verification identifier sequence pair by utilizing the generated polynomial and the unique path identifier of each switch, and then sequentially configuring corresponding sequence values into the switches through a controller. When a data packet passes through a switch, a Packet _ in message is triggered to be sent to a controller, the message carries a switch path verification identifier and indicates that the data packet currently passes through the switch; when the data packet reaches a destination, the controller collects the switch path verification identifier sent by the switch through which the data packet passes. Through grouping and screening the switch path verification identification sequence pairs of different service chains, the SDN can compare the data and analyze whether the corresponding service chains are correctly deployed. Thedefense capability of the network space is improved.

Description

technical field [0001] The invention belongs to the technical field of network communication, and in particular relates to a service path verification method for mimic configuration in mimic defense. Background technique [0002] In the SDN network architecture, this technology of separation of forwarding and control realizes the control of the entire network by means of a centralized controller and simplifies network configuration management. For the underlying network equipment, users can control the network equipment through the open interface of the upper layer, which brings great convenience to the configuration of service deployment. The business deployment of the traditional service chain is based on the physical topology structure, and hardware devices are connected to the transmission path of the business data flow. The network deployment is complex, and the physical network topology structure needs to be changed when the business changes, which is inefficient and p...

AI Technical Summary

Problems solved by technology

In the SDN network path configuration, the main problem is that the SDN controller is easily the primary target of attackers and whether the data flow is transmitted according to the path configuration requirements of the service chain after the configuration is completed.

Images