多域SDN网络安全高效拓扑发现机制研究

项目名称： 多域SDN网络安全高效拓扑发现机制研究

项目编号： No.61772113

项目类型： 面上项目

立项/批准年度： 2018

项目学科： 自动化技术、计算机技术

项目作者： 吴国伟

作者单位： 大连理工大学

项目金额： 16万元

中文摘要： 安全高效的拓扑发现是多域SDN网络成功部署的前提条件。SDN网络架构的集中控制模式、新型拓扑攻击手段及网络动态性和多域性为安全高效拓扑发现设计带来了新的挑战，现有的安全机制无法完全适用。本项目尝试利用区块链技术开展多域SDN安全拓扑发现机制研究，着力解决拓扑发现中的链路欺诈、控制器欺诈和DDoS攻击：（１）建立安全拓扑发现区块链框架，设计拓扑信息的链式区块结构、多控制器组织架构、拓扑信息交互协议；（２）研究伪链路识别方法和DDoS检测和缓解技术及自动化智能合约机制，保证拓扑信息真实性和可用性；（3）研究安全机制与拓扑发现效率均衡策略。预期成果将建立基于区块链技术的安全高效拓扑发现关键技术和方法体系，具有较强的科学意义和应用价值。

中文关键词： 软件定义网络；拓扑发现；区块链

英文摘要： Secure and efficient topology discovery is a prerequisite for successful deployment of multi-domain Software Defined Networking (SDN). The problems caused by the network architecture bring new challenges for designing secure and efficient topology discovery mechanism, including the centralized control mode of SDN, new topology attacks and the dynamics of the network and the multi-domain mode. The existing security mechanisms cannot be directly applied..In this proposal, we will focus on resolving link fraud, controller fraud, and DDoS attacks in topology discovery, and attempt to establish a secure and efficient　topology discovery　mechanism for multi-domain SDN based on blockchain technology. Firstly, we will establish a secure and efficient topology discovery framework based on blockchain and design chain structure of topology information, multi-controller organization architecture　and topology information interaction protocol. Secondly, we will design the identification method of forged link attack on topology and DDoS detection and mitigation mechanism and automatic smart contract to guarantee the authenticity and availability of the topology information. Thirdly, the strategy to balance the security and the efficiency of topology discovery will be designed. .Expected outcomes will establish the key techniques and methodologies based on blockchain technology for secure and efficient topology discovery, generation and synchronization and bring a strong scientific significance and application value.

英文关键词： Software Defined Networking; Topology Discovery ;Blockchain