基于博弈的异构控制器云安全策略研究

在软件定义数据中心网络的控制层采用多个异构控制器是提升其安全的一种有效方式。针对网络不同安全需求下控制器的部署策略问题，提出了一种博弈模型。具体地，首先，利用博弈论知识刻画了攻防博弈模型，求解纳什均衡，进而指导设计安全策略；其次，在均衡基础上分析攻防策略行为对控制层安全状态的影响；最后，仿真结果表明提出的均衡策略的有效性，并描述了攻防策略交互的动态性。

Game model based security strategy of heterogeneous controllers in the cloud

Deploying multiple heterogeneous controllers at the control level of a software-defined data center is an effective way to increase security.In view of the deployment strategy of controllers under different security requirements of the network,a game model was presented.Specifically,firstly,the game theory was used to depict the attack and defense game model and solve the Nash equilibrium,and then guided the design of security strategy.Secondly,the impact of the strategy of attack and defense on the security status of the control layer were analyzed.Finally,the simulation results show the effectiveness of the proposed equilibrium strategy,and describe the dynamic interaction strategy.