Network layer mobile target defense method and system based on OpenFlow

Abstract

The invention provides a network layer mobile target defense method and system based on OpenFlow. The method comprises steps of address acquisition, construction of initial data packet header information, first IP jump, first port jump, second port jump, second IP jump and destination node communication. The method is advantaged in that upper-layer opacity protection can be achieved without third-party software, that is, modifying an upper-layer application is not needed, and the information sent from a node is always in the movement and change state, and thereby attack of an attacker is effectively avoided.

Description

technical field [0001] The invention relates to the field of network information defense, in particular to an OpenFlow-based network layer mobile target defense method and system. Background technique [0002] In recent years, with the occurrence of many security incidents with widespread hazards (Prism Gate, SSL Heartbleed, etc.), network security has once again received extensive attention. Traditional network security technology usually adopts passive defense (such as firewall, intrusion detection technology, etc.). This type of defense technology usually exposes the target of protection, and the premise of detection and protection is that the attack is taking place. This method is very disadvantageous for the protector, and the defender is always in a passive defense position. Active defense technology is a defense method that allows the protector to take the initiative in the offensive and defensive game. Moving target defense technology is an important research dire...

AI Technical Summary

Problems solved by technology

[0003] In order to overcome the deficiencies in the prior art, one of the purposes of the present invention is to provide a network layer mobile target defense method based on OpenFlow, which can solve the problem that most of the existing achievements are based on third-party software to achieve opaque protection of the upper layer. Relevant changes, the solution that does not use third-party software has the problem of incompatibility with the existing network

[0004] The second object of the present invention is to provide a network layer mobile target defense system based on OpenFlow, which can solve the problem that most of the existing achievements are based on third-party software to realize the opaque protection of the upper layer, and the upper layer applications must be modified without using third-party software. The solution has the problem of incompatibility with the existing network

Images