Moving target defense system and moving target defense method for SDN (self-defending network)

Abstract

The invention discloses a moving target defense system for an SDN (self-defending network). The system consists of a moving target defense module and an SDN controller management module; the moving target defense module comprises a flow analysis module, a mapping information storage module, a target conversion module, an encryption transmission module, a load balance module, a safety authentication module, a business flow recording database and a mapping information recording database; the SDN controller management module comprises a flow table generation module, a flow table distribution / synchronization module, a route selection module, a DNS service module, a load balance module, a distributed management module, a safety communication module, a redundant backup module, a safety authentication module and a flow table database; furthermore, the invention also discloses a moving target defense method for the SDN. Through the moving target defense system and the moving target defense method disclosed by the invention, the difficulty of an attacker to detect a target is increased further, and therefore the safety of an intranet is comprehensively protected.

Description

Technical field [0001] The present invention relates to the technical field of network security, in particular to a system and method for defending an SDN network dynamic target. Background technique [0002] Dynamic target defense—The so-called Moving Target Defense (MTD) strategy is to establish a (from the outside) network system with diverse and constantly changing attributes, making it difficult for hackers to detect the target before launching an attack. Increase the difficulty of the attack to achieve defense. Randomly variable attributes include IP, Port, routing, host identity, command set, etc. Compared with the traditional network, the SDN network control and forwarding separation feature makes it easier to realize such a network system. The Random Host Conversion (OF-RHM) technology developed by the University of North Carolina based on the OpenFlow protocol uses the SDN network to achieve rapid host IP conversion while keeping network services transparent to users....

AI Technical Summary

Problems solved by technology

In addition, the binding between the honeypot address and the attack target remains unchanged, which also brings a considerable security hole

Images