SDN-based data flow tracing method

Abstract

The present invention provides an SDN-based data flow tracing method. The method comprises a first step of sampling a designated field regularly by an SDN switch, so as to obtain data package information Flow_ID and switch information, wherein the switch information comprises a switch identifier Switch_ID and a data package input port; a second step of dividing the data package information Flow_ID and switch information into groups with Flow_ID as a Key, so as to obtain a data set SA of each group, wherein i represents data sets of different groups; a third step of performing path analysis on the data set SA of each group according to a network topological structure G of the SDN; and a fourth step of determining a path start point according to a path analysis result, and performing path reconstruction, so as to obtain a path of a data package or a data flow. In the method, the path of the data package or the data flow is reconstructed, so that a source of an attack source can be traced.

Description

Technical field [0001] The invention relates to the field of computer networks, and in particular to a data stream traceability method based on SDN. Background technique [0002] Generally speaking, in order to effectively prevent increasingly serious denial of service attacks, the fundamental method is to find the source of the attack, and to contain the attack from the source is the most effective and economical method. If you cannot locate the source of the attack and punish it when you are under attack, the attacker will be more unscrupulous. Therefore, traceability technology occupies a very important position in the network defense system. With the growing scope of the Internet and the rapid increase in cyber crimes, traceability technology can be traced back to the source of the attack, providing a basis for investigating the legal responsibility of the attacker. In the existing traceability technology theory, the method based on data packet identification needs to use t...

AI Technical Summary

Problems solved by technology

In the traditional network, it is difficult to ensure that the information of all terminals and networks can be accurately obtained, so this method cannot be well applied to source tracing to find the source of the attack

Images