针对分布式拒绝服务(DDoS)攻击难以在危害产生之前被检测和防御的问题,提出了一种基于软件定义网络(SDN)的面向恶意扫描的控制层实时防护机制。首先,分析了SDN相比传统网络在网络层防护技术上的优势;其次,针对网络攻击手段——恶意扫描...针对分布式拒绝服务(DDoS)攻击难以在危害产生之前被检测和防御的问题,提出了一种基于软件定义网络(SDN)的面向恶意扫描的控制层实时防护机制。首先,分析了SDN相比传统网络在网络层防护技术上的优势;其次,针对网络攻击手段——恶意扫描,提出了面向恶意扫描的控制层实时防护机制,该机制在SDN集中控制式架构的基础上,充分利用Open Day Light(ODL)控制器所提供的表述性状态传递(REST)应用程序编程接口(API)开发外部应用,实现了对底层交换机端口的检测、判定、防护三个环节;最后,对给出的方案在ODL平台上进行了编程实现,并实验测试了恶意扫描的检测防御方案。实验结果表明:当有端口正在对网络进行恶意扫描时,面向恶意扫描的控制层实时防护机制可以及时禁用该端口,实时起到对恶意扫描攻击的防护作用,进而在分布式拒绝服务攻击当中具有破坏性的行为还未开始时就对其进行了预防。展开更多
随着网络应用的持续增加,如何提高现有网络资源的利用率成为一个重要的问题.SDN(Software Defined Network)将控制和转发进行分离,SDN集中控制的特性使得SDN控制器能够获取整个网络的信息.本文通过对OpenDaylight中网络信息的感知,给出...随着网络应用的持续增加,如何提高现有网络资源的利用率成为一个重要的问题.SDN(Software Defined Network)将控制和转发进行分离,SDN集中控制的特性使得SDN控制器能够获取整个网络的信息.本文通过对OpenDaylight中网络信息的感知,给出了带宽、时延和丢包率的计算方法,提出了一种基于OpenDaylight网络感知和用户需求进行路径选择的算法.然后通过计算链路目标函数的方式对算法又进行了改进,使得算法可以选出满足用户需求的最优或较优路径.通过编写OpenDaylight模块和对OpenDaylight中Dijkstra算法进行功能扩充两种方式实现了改进后的路径选择算法,最后通过实验验证了改进算法的可行性,并分析了改进算法对OpenDaylight控制器性能的影响.展开更多
在互联网时代,客户数量、应用场景和需求的不断变化,网络服务和应用程序需要具备对网络进行配置和管理的能力。软件定义网络(Software Defined Network SDN)提供了新的思路和工具,提供接口来满足上述需求。文章指出,使用Mininet和Open D...在互联网时代,客户数量、应用场景和需求的不断变化,网络服务和应用程序需要具备对网络进行配置和管理的能力。软件定义网络(Software Defined Network SDN)提供了新的思路和工具,提供接口来满足上述需求。文章指出,使用Mininet和Open Day Light,可以实现对网络环境的模拟,实现SDN。展开更多
OpenDaylight是目前备受瞩目的主流开源控制器之一,它旨在建设一个开放的SDN网络系统平台,推动SDN和NFV技术的创新实施和透明化。本书不仅深入浅出地介绍了OpenDaylight控制器的基础架构及其关键模块,还详细介绍了OpenDaylight中Control...OpenDaylight是目前备受瞩目的主流开源控制器之一,它旨在建设一个开放的SDN网络系统平台,推动SDN和NFV技术的创新实施和透明化。本书不仅深入浅出地介绍了OpenDaylight控制器的基础架构及其关键模块,还详细介绍了OpenDaylight中Controller、YangTools、OpenFlow、L2 Switch、BGP LS PCEP、OVSDB、VTN、SFC、Group Policy等一些关键项目的工作原理和开发指南,并叙述了基于OpenDaylight进行业务编排开发的技术细节和实践经验,是OpenDaylight的入门首选,是进行控制器应用开发的绝佳指南。展开更多
Distributed denial of service(DDoS)attacks are common network attacks that primarily target Internet of Things(IoT)devices.They are critical for emerging wireless services,especially for applications with limited late...Distributed denial of service(DDoS)attacks are common network attacks that primarily target Internet of Things(IoT)devices.They are critical for emerging wireless services,especially for applications with limited latency.DDoS attacks pose significant risks to entrepreneurial businesses,preventing legitimate customers from accessing their websites.These attacks require intelligent analytics before processing service requests.Distributed denial of service(DDoS)attacks exploit vulnerabilities in IoT devices by launchingmulti-point distributed attacks.These attacks generate massive traffic that overwhelms the victim’s network,disrupting normal operations.The consequences of distributed denial of service(DDoS)attacks are typically more severe in software-defined networks(SDNs)than in traditional networks.The centralised architecture of these networks can exacerbate existing vulnerabilities,as these weaknesses may not be effectively addressed in this model.The preliminary objective for detecting and mitigating distributed denial of service(DDoS)attacks in software-defined networks(SDN)is to monitor traffic patterns and identify anomalies that indicate distributed denial of service(DDoS)attacks.It implements measures to counter the effects ofDDoS attacks,and ensure network reliability and availability by leveraging the flexibility and programmability of SDN to adaptively respond to threats.The authors present a mechanism that leverages the OpenFlow and sFlow protocols to counter the threats posed by DDoS attacks.The results indicate that the proposed model effectively mitigates the negative effects of DDoS attacks in an SDN environment.展开更多
文摘针对分布式拒绝服务(DDoS)攻击难以在危害产生之前被检测和防御的问题,提出了一种基于软件定义网络(SDN)的面向恶意扫描的控制层实时防护机制。首先,分析了SDN相比传统网络在网络层防护技术上的优势;其次,针对网络攻击手段——恶意扫描,提出了面向恶意扫描的控制层实时防护机制,该机制在SDN集中控制式架构的基础上,充分利用Open Day Light(ODL)控制器所提供的表述性状态传递(REST)应用程序编程接口(API)开发外部应用,实现了对底层交换机端口的检测、判定、防护三个环节;最后,对给出的方案在ODL平台上进行了编程实现,并实验测试了恶意扫描的检测防御方案。实验结果表明:当有端口正在对网络进行恶意扫描时,面向恶意扫描的控制层实时防护机制可以及时禁用该端口,实时起到对恶意扫描攻击的防护作用,进而在分布式拒绝服务攻击当中具有破坏性的行为还未开始时就对其进行了预防。
文摘随着网络应用的持续增加,如何提高现有网络资源的利用率成为一个重要的问题.SDN(Software Defined Network)将控制和转发进行分离,SDN集中控制的特性使得SDN控制器能够获取整个网络的信息.本文通过对OpenDaylight中网络信息的感知,给出了带宽、时延和丢包率的计算方法,提出了一种基于OpenDaylight网络感知和用户需求进行路径选择的算法.然后通过计算链路目标函数的方式对算法又进行了改进,使得算法可以选出满足用户需求的最优或较优路径.通过编写OpenDaylight模块和对OpenDaylight中Dijkstra算法进行功能扩充两种方式实现了改进后的路径选择算法,最后通过实验验证了改进算法的可行性,并分析了改进算法对OpenDaylight控制器性能的影响.
文摘在互联网时代,客户数量、应用场景和需求的不断变化,网络服务和应用程序需要具备对网络进行配置和管理的能力。软件定义网络(Software Defined Network SDN)提供了新的思路和工具,提供接口来满足上述需求。文章指出,使用Mininet和Open Day Light,可以实现对网络环境的模拟,实现SDN。
文摘OpenDaylight是目前备受瞩目的主流开源控制器之一,它旨在建设一个开放的SDN网络系统平台,推动SDN和NFV技术的创新实施和透明化。本书不仅深入浅出地介绍了OpenDaylight控制器的基础架构及其关键模块,还详细介绍了OpenDaylight中Controller、YangTools、OpenFlow、L2 Switch、BGP LS PCEP、OVSDB、VTN、SFC、Group Policy等一些关键项目的工作原理和开发指南,并叙述了基于OpenDaylight进行业务编排开发的技术细节和实践经验,是OpenDaylight的入门首选,是进行控制器应用开发的绝佳指南。
基金supported by the Deanship of Graduate Studies and Scientific Research at Qassim University for financial support(QU-APC-2025).
文摘Distributed denial of service(DDoS)attacks are common network attacks that primarily target Internet of Things(IoT)devices.They are critical for emerging wireless services,especially for applications with limited latency.DDoS attacks pose significant risks to entrepreneurial businesses,preventing legitimate customers from accessing their websites.These attacks require intelligent analytics before processing service requests.Distributed denial of service(DDoS)attacks exploit vulnerabilities in IoT devices by launchingmulti-point distributed attacks.These attacks generate massive traffic that overwhelms the victim’s network,disrupting normal operations.The consequences of distributed denial of service(DDoS)attacks are typically more severe in software-defined networks(SDNs)than in traditional networks.The centralised architecture of these networks can exacerbate existing vulnerabilities,as these weaknesses may not be effectively addressed in this model.The preliminary objective for detecting and mitigating distributed denial of service(DDoS)attacks in software-defined networks(SDN)is to monitor traffic patterns and identify anomalies that indicate distributed denial of service(DDoS)attacks.It implements measures to counter the effects ofDDoS attacks,and ensure network reliability and availability by leveraging the flexibility and programmability of SDN to adaptively respond to threats.The authors present a mechanism that leverages the OpenFlow and sFlow protocols to counter the threats posed by DDoS attacks.The results indicate that the proposed model effectively mitigates the negative effects of DDoS attacks in an SDN environment.
