一种基于SDN中网络最大流的异常流量检测方法

An Anomaly Traffic Detection Method Based on Network Maximum Flow in SDN

针对SDN网络安全架构的集中控制等特点,在攻击的源头对流量实时监控,使用对网络最大流算法对网络层中端口扫描攻击时产生的流的进行检测,并将检测到的异常流量与出口流量比对,来判断SDN网络中是否遭到攻击,最后利用高校的实验环境对该检测方法进行了验证与数据分析。

This article focuses on the centralized control of the SDN network security architecture. It monitors the traffic at the source of the attack in real time and uses the network＇s maximum flow algorithm to detect the flow generated during the port scan attack in the network layer and detects the abnormal traffic, which is compared with the export traffic to determine whether there is an attack in the SDN network. Finally, it uses the university＇s experimental environment to verify and analyze the data.