Unlock instant, AI-driven research and patent intelligence for your innovation.

False flow rule injection attack detection and prevention system and method based on blockchain

A technique for injecting attack and prevention methods, applied in the field of computer network

Active Publication Date: 2021-10-26
PLA STRATEGIC SUPPORT FORCE INFORMATION ENG UNIV PLA SSF IEU
View PDF15 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

This attack allows attackers to secretly intercept and tamper with flow rules and be imperceptible to network administrators

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • False flow rule injection attack detection and prevention system and method based on blockchain
  • False flow rule injection attack detection and prevention system and method based on blockchain
  • False flow rule injection attack detection and prevention system and method based on blockchain

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0031] In order to make the purpose, technical solutions and advantages of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the present invention Examples, not all examples. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0032] like figure 1 As shown, the embodiment of the present invention provides a block chain-based false flow rule injection attack detection and prevention system, including: a controller, a switch, and a block chain node;

[0033] The controller is used to carry SDN applications and generate flow rules for unmatched flows in the switch;

[0034] The switch is used to process ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a false flow rule injection attack detection and prevention system and method based on a blockchain. The system comprises a controller, a switch and a blockchain node, wherein the controller is used for bearing a SDN application and generating a flow rule for a unmatched flow in the switch; the switch is used for processing the flow according to the flow rule generated by the controller and carrying out flow rule interaction with the blockchain node, wherein the flow rule interaction comprises transmitting the flow rule stored in the switch to the blockchain node, or requesting a flow rule copy from the blockchain node, and comparing the flow rule and the flow rule copy; and the blockchain node is used for storing the flow rule copy sent by the controller, transmitting the stored flow rule copy to the switch, requesting the flow rule in the switch, and comparing the flow rule with the flow rule copy. No matter in a delay-sensitive network environment or a non-delay-sensitive network environment, the false flow rule injection attack can be effectively detected and prevented based on the blockchain.

Description

technical field [0001] The invention relates to the technical field of computer networks, in particular to a block chain-based false flow rule injection attack detection and prevention system and method. Background technique [0002] As a new network paradigm, Software-Defined Networking (SDN) realizes the complete decoupling of the data plane and the control plane, and designs the controller to implement centralized control. On the one hand, the controller opens a northbound interface to interact with the application program; on the other hand, the controller communicates with the data plane switch based on the OpenFlow channel, including the switch uploading flow requests and the controller sending flow rules, etc. [0003] Based on OpenFlow channels, the controller manages network behavior by sending flow rules to data plane switches. The switch forwards the data flow based on the rules of the controller to realize traffic transmission. Therefore, flow rule integrity is...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/1466H04L63/1408H04L9/50
Inventor 伊鹏胡涛陈祥张震袁征张鹏任权
Owner PLA STRATEGIC SUPPORT FORCE INFORMATION ENG UNIV PLA SSF IEU