Moving target defense solution on network layer based on OpenFlow

Autor: Yi-xun HU, Kang-feng ZHENG, Yi-xian YANG, Xin-xin NIU
Jazyk: čínština
Rok vydání: 2017
Předmět:
Zdroj: Tongxin xuebao, Vol 38, Pp 102-112 (2017)
Druh dokumentu: article
ISSN: 1000-436X
DOI: 10.11959/j.issn.1000-436x.2017202
Popis: In order to take an active part in network attack and defense,a moving target defense solution on network layer based on OpenFlow was proposed,using the flexibility of network brought by OpenFlow network architecture.On the network layer,through mapping the correspondent nodes’ addresses to pseudo-random virtual addresses in the LAN and mapping correspondent nodes’ ports to virtual ports,achieving the hiding of correspond nodes in the whole network and the information of network architecture.Researches verify the system’s effectiveness.Comparing with existing moving target defense solutions,the proposed algorithm can be deployed easily in the traditional network,and realize comprehensive protection of the corresponding in the whole network.
Databáze: Directory of Open Access Journals