Threshold-Based Software-Defined Networking(SDN)Solution for Healthcare Systems against Intrusion Attacks

The healthcare sector holds valuable and sensitive data.The amount of this data and the need to handle,exchange,and protect it,has been increasing at a fast pace.Due to their nature,software-defined networks(SDNs)are widely used in healthcare systems,as they ensure effective resource utilization,safety,great network management,and monitoring.In this sector,due to the value of thedata,SDNs faceamajor challengeposed byawide range of attacks,such as distributed denial of service(DDoS)and probe attacks.These attacks reduce network performance,causing the degradation of different key performance indicators(KPIs)or,in the worst cases,a network failure which can threaten human lives.This can be significant,especially with the current expansion of portable healthcare that supports mobile and wireless devices for what is called mobile health,or m-health.In this study,we examine the effectiveness of using SDNs for defense against DDoS,as well as their effects on different network KPIs under various scenarios.We propose a threshold-based DDoS classifier(TBDC)technique to classify DDoS attacks in healthcare SDNs,aiming to block traffic considered a hazard in the form of a DDoS attack.We then evaluate the accuracy and performance of the proposed TBDC approach.Our technique shows outstanding performance,increasing the mean throughput by 190.3%,reducing the mean delay by 95%,and reducing packet loss by 99.7%relative to normal,with DDoS attack traffic.

Detecting and Mitigating DDOS Attacks in SDNs Using Deep Neural Network

Distributed denial of service(DDoS)attack is the most common attack that obstructs a network and makes it unavailable for a legitimate user.We proposed a deep neural network(DNN)model for the detection of DDoS attacks in the Software-Defined Networking(SDN)paradigm.SDN centralizes the control plane and separates it from the data plane.It simplifies a network and eliminates vendor specification of a device.Because of this open nature and centralized control,SDN can easily become a victim of DDoS attacks.We proposed a supervised Developed Deep Neural Network(DDNN)model that can classify the DDoS attack traffic and legitimate traffic.Our Developed Deep Neural Network(DDNN)model takes a large number of feature values as compared to previously proposed Machine Learning(ML)models.The proposed DNN model scans the data to find the correlated features and delivers high-quality results.The model enhances the security of SDN and has better accuracy as compared to previously proposed models.We choose the latest state-of-the-art dataset which consists of many novel attacks and overcomes all the shortcomings and limitations of the existing datasets.Our model results in a high accuracy rate of 99.76%with a low false-positive rate and 0.065%low loss rate.The accuracy increases to 99.80%as we increase the number of epochs to 100 rounds.Our proposed model classifies anomalous and normal traffic more accurately as compared to the previously proposed models.It can handle a huge amount of structured and unstructured data and can easily solve complex problems.

SDN-Based Broadband Network for Cloud Services

Over-the-top services and cloud services have created great challenges for telecom operators. To better meet the requirements of cloud services, we propose a decoupled network architecture. Software-defined networking/network function virtualization （SDN/ NFV） will be vital in the construction of cloud-oriented broadband infrastructure, especially within data centers and for intercon nection between data centers. We also propose introducing SDN/NFV in the broadband access network in order to realize a virtu- alized residential gateway （VRG）. We discuss the deployment modes of VRG.

SDN Based Next Generation Mobile Network With Service Slicing and Trials

Software-Defined Network(SDN)empowers the evolution of Internet with the OpenFlow,Network Virtualization and Service Slicing strategies.With the fast increasing requirements of Mobile Internet services,the Internet and Mobile Networks go to the convergence.Mobile Networks can also get benefits from the SDN evolution to fulfill the Sth Generation(5G) capacity booming.The article implements SDN into Frameless Network Architecture(FNA) for5G Mobile Network evolution with proposed Mobile-oriented OpenFlow Protocol(MOFP).The Control Plane/User Plane(CP/UP)separation and adaptation strategy is proposed to support the User-Centric scenario in FNA.The traditional Base Station is separated with Central Processing Entity(CPE) and Antenna Element(AE) to perform the OpenFlow and Network Virtualization.The AEs are released as new resources for serving users.The mobile-oriented Service Slicing with different Quality of Service(QoS) classification is proposed and Resource Pooling based Virtualized Radio Resource Management(VRRM) is optimized for the Service Slicing strategy with resource-limited feature in Mobile Networks.The capacity gains are provided to show the merits of SDN based FNA.And the MiniNet based Trial Network with Service Slicing is implemented with experimental results.

Application-aware routing with QoS support in SDN networks

Software defined networking( SDN) offers programmable interface to effectively control their networks by decoupling control and data plane. The network operators utilize a centralized controller to deploy advanced network management strategies. An architecture for application-aware routing which can support dynamic quality of service( Qo S) in SDN networks is proposed. The applicationaware routing as a multi-constrained optimal path( MCOP) problem is proposed,where applications are treated as Qo S flow and best-effort flows. With the SDN controller applications,it is able to dynamically lead routing decisions based on application characteristics and requirements,leading to a better overall user experience and higher utilization of network resources. The simulation results show that the improvement of application-aware routing framework on discovering appropriate routes,which can provide Qo S guarantees for a specific application in SDN networks.

An SDN/NFV Based Framework for Management and Deployment of Service Based 5G Core Network

The traffic explosion and the rising of diverse requirements lead to many challenges for traditional mobile network architecture on flexibility, scalability, and deployability. To meet new requirements in the 5 G era, service based architecture is introduced into mobile networks. The monolithic network elements(e.g., MME, PGW, etc.) are split into smaller network functions to provide customized services. However, the management and deployment of network functions in service based 5 G core network are still big challenges. In this paper, we propose a novel management architecture for 5 G service based core network based on NFV and SDN. Combined with SDN, NFV and edge computing, the proposed framework can provide distributed and on-demand deployment of network functions, service guaranteed network slicing, flexible orchestration of network functions and optimal workload allocation. Simulations are conducted to show that the proposed framework and algorithm are effective in terms of reducing network operating cost.

SDN环境中基于Bi-LSTM的DDoS攻击检测方案

针对5G物联网环境中海量接入设备带来的DDoS攻击威胁,同时考虑到软件定义网络SDN对5G物联网的适用性,提出了一种在SDN环境中利用长短期记忆LSTM网络检测DDoS攻击的方案,以提高对DDoS攻击检测的准确性。并采用分治算法思想,提出了一种轻量级分布式边缘计算架构OCM,在物联网中的空闲边缘节点部署基于Bi-LSTM的轻量级神经网络完成检测任务,在保证准确性的同时,增加了检测的灵活性。在ISCX2012数据集上评估了所提方案的有效性和可行性。实验结果表明,所提方案能够准确检测DDoS攻击并有效缓解DDoS攻击。

SDN Based Security Services

With the development and revolution of network in recent years,the scale and complexity of network have become big issues.Traditional hardware based network security solution has shown some significant disadvantages in cloud computing based Internet data centers(IDC),such as high cost and lack of flexibility.With the implementation of software defined networking(SDN),network security solution could be more flexible and efficient,such as SDN based firewall service and SDN based DDoS-attack mitigation service.Moreover,combined with cloud computing and SDN technology,network security services could be lighter-weighted,more flexible,and on-demanded.This paper analyzes some typical SDN based network security services,and provide a research on SDN based cloud security service(network security service pool)and its implementation in IDCs.

面向敏捷网络服务的SDN智能流量管理与优化

针对传统网络架构中流量拥塞和负载不均衡的问题,提出了一种基于软件定义网络(SDN)的智能流量管理与优化方法。该方法综合了一套精心设计的策略,包括流量分类与负载均衡、动态路径选择与优化以及服务质量保障等关键模块。实验验证是基于OpenFlow协议和Mininet模拟器进行的,结果显示,该方法在带宽利用率、延迟和丢包率等关键性能指标上具有显著优势,有效提升了网络服务的性能和可靠性。研究成果对于推动SDN技术在网络管理和优化方面的应用具有深远意义,不仅能够增强网络服务的自动化和可控性,也能够满足日益增长的敏捷网络服务的需求。

SDN环境下DDoS攻击检测和缓解系统

分布式拒绝服务攻击(distributed denial of service,DDoS)是网络安全领域的一大威胁.作为新型网络架构,软件定义网络(software defined networking,SDN)的逻辑集中和可编程性为抵御DDoS攻击提供了新的思路.本文设计并实现了一个轻量级的SDN环境下的DDoS攻击检测和缓解系统.该系统使用熵值检测方法,并通过动态阈值进行异常判断.若异常,系统将使用更精确的决策树模型进行检测.最后,控制器通过计算流的包对称率确定攻击源,并下发阻塞流表项.实验结果表明,该系统能够及时响应DDoS攻击,具有较高的检测成功率,并能够有效遏制攻击.

SDN数据平面软件一致性测试用例生成方法

SDN(software-definednetwork)旨在解决架构复杂且分散的传统网络出现的问题,使网络具有更强的灵活性.P4编程语言的特征在于用户可以直接根据自己对处理数据包的需求定义P4程序,然后经过编译过程,生成适配文件将用户需求配置到网络设备.面向P4编程语言的SDN数据平面一致性测试,是将一致性测试用例发送给P4网络设备,评估实际输出和预期输出的一致程度.一致性测试用例是执行一致性测试的载体,而传统的人工构造测试用例是一项繁琐耗时费力的工作.重点分析了面向P4编程语言的SDN数据平面软件一致性测试用例设计原则和生成方法,给出了一致性测试用例覆盖标准,设计了命令信息实体结构和测试用例实体结构,以装载P4程序的simpleswitch虚拟交换机为测试对象,说明一致性测试用例生成过程,实现了一个用于P4网络设备一致性测试的测试用例自动生成工具,并验证了该工具自动生成测试用例的有效性,实现了一致性测试用例构造过程简易性.

面向SDN的动态网络策略部署与实现

软件定义网络(SDN)为未来网络业务的管理要求提供了一种新的解决方案。以动态服务功能链作为服务功能编排模式、以高级网络编程语言作为服务功能部署工具,并结合虚拟网络映射设计了业务到策略、从控制器到网络节点的部署方案。基于SDN三层结构,提出动态策略管理系统。动态策略管理系统可以根据反馈的网络状态信息调整网络策略,并对同一节点上的网络策略进行冲突检测,根据不同的冲突类型选择组合方式,有效避免了网络策略冲突,实现网络服务的自适应部署。最后,通过实验验证了动态策略管理系统从业务到策略的完整部署过程。

移动分组域核心网向SDN架构EPC演进的发展展望

针对移动分组域核心网的发展,研究了CDMA和EPC的网络结构,分析了EPC网络向SDN结构发展的趋势。通过对比EPC的网络组成和SDN网络架构的相似性,确定了基于SDN架构的EPC是移动分组域核心网发展的重要目标,是网络发展中的一个重要里程碑,关联体和融合体是EPC和SDN两者共同发展的组成形式。SDN网络促进了EPC的进一步发展,完善整个架构网元之间的接口是下一步的重要研究工作。

Service Function Chain Migration in LEO Satellite Networks

With the advancements of software defined network(SDN)and network function virtualization(NFV),service function chain(SFC)placement becomes a crucial enabler for flexible resource scheduling in low earth orbit(LEO)satellite networks.While due to the scarcity of bandwidth resources and dynamic topology of LEO satellites,the static SFC placement schemes may cause performance degradation,resource waste and even service failure.In this paper,we consider migration and establish an online migration model,especially considering the dynamic topology.Given the scarcity of bandwidth resources,the model aims to maximize the total number of accepted SFCs while incurring as little bandwidth cost of SFC transmission and migration as possible.Due to its NP-hardness,we propose a heuristic minimized dynamic SFC migration(MDSM)algorithm that only triggers the migration procedure when new SFCs are rejected.Simulation results demonstrate that MDSM achieves a performance close to the upper bound with lower complexity.

基于SDN和VxLAN的云网一体化专线方案探讨

随着云业务的发展,传统的点到点的专线业务已经开始逐步向点到云的方向发展,探讨了基于SDN和VxLAN技术的运营商专线接入云的技术方案,以及实现云资源和网络资源协同的技术方案。

基于SDN架构的智能专线探索

随着"互联网+"时代的到来,企业信息化建设脚步加快,对专线业务的需求也随之提高。分析互联网时代用户对专线业务的需求及传统专线业务面临的问题,结合SDN网络特征,提出了以SDN架构为核心,通过互联网化的方式为用户提供"专线+云资源"一站式自助申请、快速开通、灵活调整等功能的智能专线解决方案,并通过SDN网络的网络监控功能实现专线业务端到端的智能保障,以提升用户体验,推进运营商网络互联网化转型。

基于SDN网络的安全设备路由研究

SDN(Software Defined Networking,软件定义网络)是一种新型的网络架构,是网络实现自动化部署灵活管理的一个重要方式。SDN技术将网络的数据平面和控制平面相分离,从而实现了网络流量的灵活控制。因此,基于SDN技术提出了一种基于SDN网络的安全设备路由模型,该模型结合改进的内嵌式安全设备最短路由算法和旁路式最短路由算法及神经网络最短路由算法,得到一种高效的安全设备路由策略,并且在此基础上构建了一个网络安全服务调度系统,能够在安全设备混合部署的复杂网络环境中,按用户需求提供个性化的安全服务;同时,通过计算较低网络成本的最短安全路径,提高了网络的路由效率和资源利用率。

基于SDN的航空通信服务调度关键问题分析

当前,航空作战平台的发展已逐步由传统“机群”向智能“集群”过渡,因此,依托航空平台信息网络体系,实现用户信息需求与通信资源的有效匹配,成为航空集群通信交互的主要模式。基于航空信息网络在集群作战背景下的应用需求,介绍了航空集群及航空信息网络的研究进展,总结了现有航空信息网络在集群作战应用中存在的问题,阐述了软件定义网络(Software Defined Networking,SDN)技术为其带来的性能优势,并结合集群空战中通信服务调度实现场景分析了亟待解决的关键科学问题。

SDN技术在电力通信网的应用

电力通信业务在可靠性的基础上,对网络的灵活性和敏捷性提出了更高的要求。传统电力通信网络适应性弱,已经无法满足新兴业务接入需求。从电力通信网络的现状及缺点入手,分析了软件定义网络(Software Defined Network,SDN)技术应用于电力通信网的价值和优势,阐述了具体可行的SDN技术应用方案。引入SRv6技术,通过应用采集、分析、控制于一体的智能闭环运维架构,基于iMaster NCE管理平台实现业务快速部署、网络流量智能调度和预测、故障仿真等功能,保障承载业务安全、稳定、可视化运行,有效解决电力通信网存在的问题。

基于SDN的一种云服务流量控制方法研究

为了解决云服务中客户端传输流量过大或者突发流霸占服务导致的网络拥塞、服务性能降低问题,将软件定义网络(Software-Defined Networking,SDN)架构运用于云服务流量控制,并提出了一种基于SDN的云服务流量控制方法。该方法基于SDN架构中流表的特点,通过承诺速率与实际访问速率的比对关系对连接请求进行分类、修改流表、划分优先级,然后根据不同的请求优先级来处理服务,以此控制整个服务系统的流量,从而降低整个服务过程的时延。实验测试表明,该设计能够有效地降低网络服务时延,对云服务质量有显著提高。