一种软件定义网络的安全服务路径优化构建机制

针对现有的安全服务路径优化构建方法缺乏综合考虑具体安全需求和底层资源状态的问题,提出一种基于启发式广度优先搜索算法的安全服务路径优化构建机制。首先,给出了基于软件定义网络的安全服务路径构建的总体结构,并引入整数线性规划对安全服务路径优化构建问题进行数学建模;其次,提出一种启发式广度优先搜索的模型求解算法,主要采用“先选择后搜索”的方式,解决同时考虑具体安全需求和底层资源状态的安全服务路径优化构建问题。仿真实验结果表明,所提出的构建机制在性能指标上优于对比方法。

SDN-based optimal security service path construction mechanism

In view of the fact that existing security service path optimization methods lack a comprehensive consideration of the specific security requirements and the underlying resource status, a dynamic construction mechanism of security service path based on the heuristic breadth first search algorithm is proposed. First, the overall structure of the dynamic construction of the security service path based on the software-defined networking is given, and the integer linear programming is introduced to model this problem. Second, a model solving algorithm is proposed, which mainly adopts the "first select after search" method to solve the security service path construction problem which considers both the specific security needs and the underlying resource status. Finally, simulation results show that the proposed construction mechanism is better than the compared method in terms of the performance index.