Local area network communication method and device based on moving target defense

Abstract

The invention discloses a local area network communication method and a device based on moving target defense. The method comprises the following steps: allocating a real IP address to each terminal in a local area network through a switch; the local area network comprises the switch, a terminal and a server; determining a virtual IP address of each terminal according to the real IP address; establishing communication between a first terminal and a second terminal in the local area network according to the virtual IP address; converting the virtual IP addresses of the first terminal and the second terminal; and maintaining communication between the first terminal and the second terminal according to the converted virtual IP address, thereby realizing local area network communication and protecting information security in a local area network communication process under the condition of not changing an original switch of the local area network and not needing manual configuration.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and device for local area network communication based on moving target defense. Background technique [0002] With the development of computer technology and the popularization of network applications, information network plays an increasingly important role in the process of social development. Individuals that were previously dispersed and independent are now increasingly interconnected, forming networks, large or small. In recent years, problems such as key information leakage, enterprise system collapse, and financial service failures have emerged one after another. The penetration and destruction of the network pose a very serious threat to many areas of the country and society. Aiming at the current cyberspace security issues, the emergence of Moving Target Defense (MTD) provides a new idea for the improvement of cyberspace security. [0003] The tradition...

AI Technical Summary

Problems solved by technology

[0005] Nowadays, there are already some internal network defense technologies based on moving target defense at home and abroad, but they face the following problems: the use conditions are harsh, and all switches in the LAN need to be replaced with SDN switches; Manually configure the plug-in to solve the synchronization problem; although the method of adding a temporary flow table is proposed to ensure end-to-end communication when the virtual IP address jumps, this method will waste a lot of flow table resources and reduce the average matching speed of the flow table

Images