Chaos moving target defense method based on SDN and system thereof

Abstract

The invention discloses a Chaos moving target defense method based on an SDN and a system thereof. Confusion and dynamic change functions of a network system for requesters can be realized by utilizing a Chaos tower algorithm, a confusion defense method and a random IP defense method. Therefore, a Chaos tower structure is designed by the system to grade the hosts of the network according to degree of importance. Confusion defense performs grade confusion on illegal access, and confusion of return information is performed according to the confusion index so that attackers are enabled to receive false information; and when the confusion index excessively high, communication is directly blocked out. Random IP defense is performed on legal flow network access, and flow tables are periodically issued via a controller to perform IP random conversion on legal communication in an intranet environment. Network equipment in the area has extremely high anonymity and fluctuation under the condition of guaranteeing normal information exchange efficiency so that probing of intruders can be defended, attack range is widened and attack cost is increased.

Description

technical field [0001] The invention belongs to the technical field of the Internet, and in particular relates to a novel SDN-based Chaos moving target defense method and system. Background technique [0002] Intranet security has become a new hot spot in information security. Survey data show that 63.6% of enterprise users in my country are at the "high risk" level, and the economic losses caused by network leaks are as high as tens of billions each year. Although most enterprises attach great importance to the issue of intranet security management, and investment in intranet security continues to increase, intranet security is still severe. [0003] Today's enterprise intranets are mostly built on static systems, so those intranet attack tools are also tailored for static networks, such as Nmap, worms, and Cain. Moreover, the cost of intranet security defense is seriously disproportionate to the efforts of malicious attackers to break through the network. Intranet defe...

AI Technical Summary

Problems solved by technology

[0006] Since the above-mentioned schemes implement consistent obfuscation protection for all host communications in the intranet, for an enterprise, the flexibility to defend against malicious attackers is lacking, and it is easy to attract the attention of malicious attackers

Images