Threshold-Based Software-Defined Networking(SDN)Solution for Healthcare Systems against Intrusion Attacks

The healthcare sector holds valuable and sensitive data.The amount of this data and the need to handle,exchange,and protect it,has been increasing at a fast pace.Due to their nature,software-defined networks(SDNs)are widely used in healthcare systems,as they ensure effective resource utilization,safety,great network management,and monitoring.In this sector,due to the value of thedata,SDNs faceamajor challengeposed byawide range of attacks,such as distributed denial of service(DDoS)and probe attacks.These attacks reduce network performance,causing the degradation of different key performance indicators(KPIs)or,in the worst cases,a network failure which can threaten human lives.This can be significant,especially with the current expansion of portable healthcare that supports mobile and wireless devices for what is called mobile health,or m-health.In this study,we examine the effectiveness of using SDNs for defense against DDoS,as well as their effects on different network KPIs under various scenarios.We propose a threshold-based DDoS classifier(TBDC)technique to classify DDoS attacks in healthcare SDNs,aiming to block traffic considered a hazard in the form of a DDoS attack.We then evaluate the accuracy and performance of the proposed TBDC approach.Our technique shows outstanding performance,increasing the mean throughput by 190.3%,reducing the mean delay by 95%,and reducing packet loss by 99.7%relative to normal,with DDoS attack traffic.

Software defined satellite networks:A survey

In recent years,satellite networks have been proposed as an essential part of next-generation mobile communication systems.Software defined networking techniques are introduced in satellite networks to handle the growing challenges induced by time-varying topology,intermittent inter-satellite link and dramatically increased satellite constellation size.This survey covers the latest progress of software defined satellite networks,including key techniques,existing solutions,challenges,opportunities,and simulation tools.To the best of our knowledge,this paper is the most comprehensive survey that covers the latest progress of software defined satellite networks.An open GitHub repository is further created where the latest papers on this topic will be tracked and updated periodically.Compared with these existing surveys,this survey contributes from three aspects:(1)an up-to-date SDN-oriented review for the latest progress of key techniques and solutions in software defined satellite networks;(2)an inspiring summary of existing challenges,new research opportunities and publicly available simulation tools for follow-up studies;(3)an effort of building a public repository to track new results.

ADAFT:SDN大规模流表的适应性深度聚合存储架构

为解决软件定义网络(SDN)数据平面中的三态内容可寻址存储器(TCAM)资源紧张问题,提出了一种基于内容表项树的SDN流表深度聚合方法,进而构建一种SDN大规模流表的适应性深度聚合存储架构ADAFT。该架构放宽了聚合表项之间的汉明距离要求,构建内容表项树聚合动作集不同的流表项,显著提高了流表聚合程度。设计了一种TCAM装载率感知的内容表项树动态限高机制,以降低流表查找开销。同时,提出了一种TCAM装载率感知的表项聚合适应性选择策略,以均衡流表聚合程度和查找开销。实验结果表明,ADAFT架构的流表压缩率明显高于现有方法,最高可达65.74%。

基于人工智能的SDN网络中流量优化与拥塞控制方法

文章深入研究基于强化学习的流量优化与拥塞控制方法在软件定义网络(Software Defined Network,SDN)中的应用。首先,详细阐述SDN网络的架构与原理。SDN网络的灵活性和可编程性为网络管理提供了全新的范式。其次,提出了一种基于强化学习的流量优化与拥塞控制方法,通过建模状态、动作、奖励等要素,实现网络流量智能调整。最后,在Mininet仿真环境中进行了实验验证。通过监测吞吐量、延迟、拥塞情况等性能指标,验证所提方法的有效性。实验结果表明,在网络性能方面,所提方法相较于传统方法取得了显著改善,具备更好的适应性和优化能力。

智慧校园网络及安全的SDN架构选择分析

重点研究智慧校园网络与安全的软件定义网络(Software Defined Network,SDN)架构选择,分别讨论SDN架构应用的必要性、实现方法、网络与安全维护建议等内容。从智慧校园的集中部署、意图网络与智慧校园的融合、以零信任为核心构建网络安全架构3个维度出发,提出保护智慧校园网络安全的建议。旨在强调SDN架构对于智慧校园建设的运行安全维护作用,以期为今后智慧校园的深化建设提供技术支持。

A Methodology for Reliability of WSN Based on Software Defined Network in Adaptive Industrial Environment

As communication technology and smart manufacturing have developed, the industrial internet of things(IIo T)has gained considerable attention from academia and industry.Wireless sensor networks(WSNs) have many advantages with broad applications in many areas including environmental monitoring, which makes it a very important part of IIo T. However,energy depletion and hardware malfunctions can lead to node failures in WSNs. The industrial environment can also impact the wireless channel transmission, leading to network reliability problems, even with tightly coupled control and data planes in traditional networks, which obviously also enhances network management cost and complexity. In this paper, we introduce a new software defined network(SDN), and modify this network to propose a framework called the improved software defined wireless sensor network(improved SD-WSN). This proposed framework can address the following issues. 1) For a large scale heterogeneous network, it solves the problem of network management and smooth merging of a WSN into IIo T. 2) The network coverage problem is solved which improves the network reliability. 3) The framework addresses node failure due to various problems, particularly related to energy consumption.Therefore, it is necessary to improve the reliability of wireless sensor networks, by developing certain schemes to reduce energy consumption and the delay time of network nodes under IIo T conditions. Experiments have shown that the improved approach significantly reduces the energy consumption of nodes and the delay time, thus improving the reliability of WSN.

EARS: Intelligence-Driven Experiential Network Architecture for Automatic Routing in Software-Defined Networking

Software-Defined Networking(SDN)adapts logically-centralized control by decoupling control plane from data plane and provides the efficient use of network resources.However,due to the limitation of traditional routing strategies relying on manual configuration,SDN may suffer from link congestion and inefficient bandwidth allocation among flows,which could degrade network performance significantly.In this paper,we propose EARS,an intelligence-driven experiential network architecture for automatic routing.EARS adapts deep reinforcement learning(DRL)to simulate the human methods of learning experiential knowledge,employs the closed-loop network control mechanism incorporating with network monitoring technologies to realize the interaction with network environment.The proposed EARS can learn to make better control decision from its own experience by interacting with network environment and optimize the network intelligently by adjusting services and resources offered based on network requirements and environmental conditions.Under the network architecture,we design the network utility function with throughput and delay awareness,differentiate flows based on their size characteristics,and design a DDPGbased automatic routing algorithm as DRL decision brain to find the near-optimal paths for mice and elephant flows.To validate the network architecture,we implement it on a real network environment.Extensive simulation results show that EARS significantly improve the network throughput and reduces the average packet delay in comparison with baseline schemes(e.g.OSPF,ECMP).

DDoS Attack in Software Defined Networks: A Survey

Distributed Denial of Service(DDoS) attacks have been one of the most destructive threats to Internet security. By decoupling the network control and data plane, software defined networking(SDN) offers a flexible network management paradigm to solve DDoS attack in traditional networks. However, the centralized nature of SDN is also a potential vulnerability for DDo S attack. In this paper, we first provide some SDN-supported mechanisms against DDoS attack in traditional networks. A systematic review of various SDN-self DDo S threats are then presented as well as the existing literatures on quickly DDoS detection and defense in SDN. Finally, some promising research directions in this field are introduced.

Software-Defined Optical Data Centre Networks

Based on the analysis of data centre(DC) traffic pattern, we introduced a holistic software-defined optical DC solution. Architecture-on-Demand based hybrid optical switched(OPS/OCS) data centre network(DCN) fabric is introduced, which is able to realise different inter-and intra-cluster configurations and dynamically support diverse traffic in the DC. The optical DCN is controlled and managed by a software-defined networking(SDN) enabled control plane to achieve high programmability. Moreover, virtual data centre(VDC) composition is developed as an application of such softwaredefined optical DC to create VDC slices for different tenants.

ForSA — A New Software Defined Network Architecture Based on ForCES

In recent years, SDN(Software Defined Network) as a new network architecture has become the hot research point. Meanwhile,the well-known Open Flow-based SDN got a lot of attention. But it can't provide a flexible and effective network resource description method.As an open programmable technology, For CES(Forwarding and Control Element Separation)has also been concerned. However, For CES is confined within a single network node and cannot be applied to the entire network. This paper proposes a new architecture — ForS A(ForC ESbased SDN architecture). The architecture is added a configuration layer based on the traditional SDN architecture, which solves the problem that the northbound interface is not clear between the application layer and the control layer in the SDN architecture. ForS A also implements the compatibility within various forwarding devices in the forwarding layer.

基于分布式SDN的机动通信系统拓扑发现方法

针对目前传统机动通信系统、主流软件定义网络(software defined network,SDN)的拓扑发现方法不适合基于分布式SDN的机动通信系统这一问题,遵循OpenFlow拓扑发现算法(OpenFlow discovery protocol,OFDP)移植传输控制协议/网际协议(transmission control protocol/Internet protocol,TCP/IP)相关协议到SDN网络的研究思路,对开放最短路径优先(open shortest path first,OSPF)协议进行优化,精简协议状态机、优化协议报文、增加协议功能并设计拓扑发现算法,提出一种适合基于分布式SDN的机动通信系统的拓扑发现方法,并搭建仿真实验平台进行验证。实验结果表明,优化后OSPF协议适应于分布式SDN网络,网络拓扑建链时间降低80%且重新收敛时间显著降低,建链开销平均每秒接收字节数、发送字节数分别下降了31.7%和21.5%,维持开销平均每秒收发字节数降低了45%,增加了收集信道种类等网络信息的新功能。

基于SDN的广播电视内容监管云平台动态网络设计

探讨面向软件定义网络(Software Defined Network,SDN)的广播电视内容监管云平台动态网络设计。通过对SDN内涵的分析,提出广播电视内容监管云平台网络的总体设计,明确其在网络管理和控制方面的优势和特点。介绍SDN的具体组网模型,在SDN控制器方面,提出自动化配置及业务隔离、网络的集中统一控制和出口资源池按需调度等关键设计。通过上述设计,实现对广播电视内容的有效监管和管理,同时提高网络资源的利用率。

基于SDN的广播IP音频信号调度系统设计

随着媒体传播方式的转变,广播电视中心正向融媒体转型,节目制作和发布越来越依赖互联网流媒体信号。传统广播信号调度系统已无法满足网际互连协议(Internet Protocol,IP)化制播的需求。基于此,设计基于软件定义网络(Software Defined Network,SDN)的广播IP音频信号调度系统,分析其优势、架构及未来发展方向。

SDN技术在广播电视播控网络智能化改造中的应用

探讨软件定义网络(Software Defined Network,SDN)技术在广播电视播控网络智能化改造中的应用。分析智能化改造的业务、技术和经济需求,指出传统网络架构在面临媒体形态多样化和观众需求个性化时的局限性。阐述SDN技术在网络架构优化、动态资源分配、流量工程优化、安全保障强化以及开放接口与生态系统构建等方面的应用策略。通过引入SDN技术,广播电视播控网络能够实现更高效、灵活和安全的运行,满足不断增长的业务需求,降低运营成本,推动行业的数字化转型和升级。

Opportunistic spectrum sharing in software defined wireless network

Over the past few decades, the world has witnessed a rapid growth in mobile and wireless networks（MWNs） which significantly change human life. However, proliferating mobile demands lead to several intractable challenges that MWN has to face. Software-defined network is expected as a promising way for future network and has captured growing attention. Network virtualization is an essential feature in software-defined wireless network（SDWN）, and it brings two new entities, physical networks and virtual networks. Accordingly, efficiently assigning spectrum resource to virtual networks is one of the fundamental problems in SDWN. Directly orienting towards the spectrum resource allocation problem, firstly, the fluctuation features of virtual network requirements in SDWN are researched, and the opportunistic spectrum sharing method is introduced to SDWN. Then, the problem is proved as NP-hardness. After that, a dynamic programming and graph theory based spectrum sharing algorithm is proposed.Simulations demonstrate that the opportunistic spectrum sharing method conspicuously improves the system performance up to around 20%–30% in SDWN, and the proposed algorithm achieves more efficient performance.

基于SDN的通信网络管理策略分析

阐述SDN的基本原理,探讨SDN通信网络管理的优势,它能够提高网络效率、增强网络安全性。分析SDN通信网络管理面临的挑战和解决方案,以及未来发展趋势和预测。SDN通过其集中式管理、可编程性、虚拟化能力和自动化能力,为通信网络管理提供了新的可能性。

SDN在数据中心传输中的自适应流量管理研究

探讨软件定义网络(Software Defined Network,SDN)在数据中心传输中的自适应流量管理。SDN架构的关键组成要素包括控制器、应用层和南向接口,通过控制平面和数据平面的分离,实现了网络的灵活性和可编程性。OpenFlow协议作为关键通信协议在SDN中得到广泛应用,为控制器提供了调整数据平面行为的标准化手段。在自适应流量管理方面,控制器通过实时监测和智能调整网络状态,识别瓶颈和拥塞点,并根据不同应用的性能需求进行精确的流量管理决策。基于流和基于应用的自适应管理算法使网络能够灵活适应不同流量负载,提高资源利用效率。流量监测工具如NetFlow和sFlow以及反馈机制在实现自适应流量管理中发挥关键作用,实时感知和调整网络状态,使SDN网络更加智能、适应性更强,并提供了优越的应用体验。未来的研究方向将关注SDN中自适应流量管理的创新策略,推动网络技术不断进步。

基于改进遗传算法的SDN控制器放置优化研究

与传统的网络不同,软件定义网络将网络的控制层与数据层分开,从而提供了网络的集中视图,可以灵活控制网络流量。然而在大规模的软件定义网络中不合理的控制器部署会直接影响到网络的性能。为了找到网络中最优的控制器放置位置和数量,同时最小化时延、均衡负载并优化成本,提出一种基于改进遗传算法的求解算法。在该算法中引入贪婪思想并改进变异算子从而改善其收敛速度和寻优能力。此外,在一些真实的拓扑上将该算法与其他求解算法进行对比,结果表明改进的遗传算法性能更好。

SDN中基于过程优化的动态负载均衡策略

在软件定义网络中,多控制器静态部署策略无法适应网络中流量动态变化,存在控制平面负载不均衡的问题。提出基于过程优化的动态负载均衡策略。通过优化原始的交换机迁移方案,以均衡各控制器负载作为目标,设计理想迁出流量和迁移交换机选取概率模型,选取待迁移交换机并确定迁入控制器。综合考虑时延与迁移代价对网络性能的影响,针对蚁群算法中收敛速度较慢且容易陷入局部最优的问题,通过对启发函数和信息素更新公式进行改进,并引入非线性递减挥发系数,为每个迁移交换机选取最佳的迁入控制器。为避免不同待迁移交换机选取同一个迁入控制器造成迁入控制器过载,通过设计交换机顺序迁移算法,实现交换机的协调迁移。仿真实验结果表明,与MUCS、NM、CDAA等策略相比,该策略在面对复杂的流量情景时,迁移交换机和迁入控制器的选取更加合理,在保证各控制器负载均衡的同时,迁移代价和流建立时间平均降低10.3%和36.1%,交换机与控制器之间时延平均降低13.6%。

基于SDN的最小跳数卫星网络路由算法

为解决卫星网络星上计算和存储能力有限、传统路由算法不适用的问题,结合软件定义网络思想,提出了一种基于SDN的最小跳数路由算法。该算法利用SDN的集中控制与全局视图,划分源目节点最小跳数范围求取最小跳数集,计算权重选取满足不同服务质量(QoS)数据包的最优路径并与GEO/LEO双层网络进行路由选择。实验结果表明,该算法较ACO算法和Dijkstra算法在时延、吞吐量和丢包率方面性能较好,同时算法时间复杂度较低。