SDN网络中基于流特征值的DDoS攻击检测方法

Research on DDo S attack detection and judgment based on stream eigenvalues of software defined networks

DDo S攻击对互联网信息安全构成严重威胁,是网络空间安全领域研究的重要热点。通过对比传统网络环境及软件定义网络环境的攻击检测研究,提出基于软件定义网络的流特征值的DDo S攻击检测判断研究。利用SDN控制器的集中控制特性,提取流表中的与DDo S相关的六元组特征值信息,进行DDo S攻击检测判断研究。

Distributed denial of service attack poses a serious threat to the security of Internet information,which is an important hotspot in the research of cyberspace security. By comparing the attack detection of the traditional network environment and the software defined network（ SDN）environment,the DDo S attack detection and judgment of the flow eigenvalues based on software defined network is proposed. Based on the centralized control characteristic of SDN controller,the ternary eigenvalue information related to DDo S in the flow table is extracted and the DDo S attack detection is studied.