sdn应用的策略冲突检测方法研究

《sdn应用的策略冲突检测方法研究》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、AbstractRapiddevelopmentofthenetworkisahugeconveniencetopeople'slives,andbringsingreatchallengesforthenetworkmaintenanceandmanagementaswell.Therapidgrowthofnetworktrafficmakestheburdenofroutersandothernetworkdevicesincreasinglyheavy,andtrafficforwardingunitsb

2、ecomemoreandmorebloated・Thedevelopmentoflarge-scaledatacentersandcloudsputsforwardhigherrequirementsforscalabilityandopennessofthenetwork・Traditionalnetworkarchitecturecannolongermeettheneedsofnetworkdevelopment,whichhasbecomethebottleneckofthedevelopmentofne

3、twork.Software-definednetwork,whichiscalledSDNforshort,isanewtypeofnetworkarchitecturetoaccommodatefutureneedsofInternetItseparatesthelogicalnetworkcontrolfunctionsanddataforwardingfunctionsandallowsnetworktobeprogrammable,whichgreatlyimprovestheopennessandsc

4、alabilityofthenetworkandmakesnetworkmanagementmoreconvenient.Asanovelnetworkarchitecture,SDNhasbroughtgreatopportunitiesforimprovingnetworksecurity,butalsobringsnewsecuritythreatstothenetwork.Forexample,inapplication-levelsecuritythreats,theattackerscanaccess

5、maliciousapplicationstothenetwork,makenetworkconfusionbyconductingapplicationpolicyconflictorconductconflictwithnetworksecuritypolicytounderminenetworksecuritydefensemechanismsetc.Obviously,applicationpolicyconflicthasbecomeabiggerandbiggerthreattonetworksecu

6、rity・Butthereisnogenericandeffectiveapplicationpolicyconflictdetectionmethodatpresent.Againstthissituation,thisthesisproposesarelativelyeffectiveSDNapplicationpolicyconflictdetectionmethod.Theproposedmethoddoesauthenticationandauthorizationandthenassignstheap

7、propriateprioritytotheapplication.Themethodwillconducttheconflictdetectiontotheflowrulerequestsgeneratedbytheapplicationbasedonconflictanalysisalgorithm,determiningwhetherthereisaconflictwithrestofapplicationpoliciesandsecuritypolicies.Ifthereisaconflict,itwi

8、lleliminatetheconflictthroughconflictdecisionalgorithmandfeedbackthenetworkstatustothenetworkmanagerinreal-time.ThisthesishasestablishedaneffectiveframeworkforSDNapplicationpolicyconflict