基于SDN的DDoS攻击检测和防护机制研究

随着云计算和大数据等技术的发展,传统网络已经无法满足飞速发展的需求,软件定义网络(SDN)的出现带来了网络发展的变革,虽然SDN已经得到一定的应用,但是其仍处在研究完善阶段.本文阐述了SDN的关键技术以及主要协议,分析了SDN面临的安全问题,提出了一种基于流表特征的DDoS攻击检测方法,并给出了对应的攻击缓解方案.

Research on DDoS Dtection and Protection Based on SDN

With the development of cloud computing and big data technology,traditional network has been unable to meet the needs of rapid development,software defined network(SDN)brings to the change of the development of network,although the SDN has been used,but it is still in a stage of study and improve.This paper describes the key technology of SDN and the main protocol,Analysis of security issues faced by SDN, A DDoS attack detection method based on flow table feature is proposed, and puts forward the corresponding attack mitigation schemes.Propose corresponding attack mitigation plan.