Method for active security defense of SDN network based on information entropy calculation

Abstract

The invention discloses a method for active security defense of an SDN network based on information entropy calculation. The method comprises the following steps: S01, inputting traffic; S02, calculating an information entropy, defining a destination address information entropy threshold, and judging the entropy of the network flow and the data size of the destination address information entropy threshold; S03, judging an entropy value; S04, producing a forwarding table; S05, processing the traffic. In the present invention, according to the SDN network active security defense method, information entropy calculation is carried out on network traffic; the defects in the existing network security equipment deployment architecture can be avoided; the real-time forwarding efficiency of the network is improved; according to the SDN network security defense method and system, the unreasonable topological structure of the network is eliminated, so the single fault of the network is eliminated, the risk hidden danger of the network is reduced, the forwarding traffic table can be customized, the abnormal flow is processed, and the abnormal traffic in the SDN network is actively identified and processed through the calculation of the information entropy, thereby achieving the purpose of active network security defense.

Description

technical field [0001] The invention relates to the technical field of SDN network security, in particular to a method for active security defense of an SDN network based on information entropy calculation. Background technique [0002] Software-defined networking is an implementation of network virtualization. Its core technology, OpenFlow, separates the control plane and data plane of network devices, thereby realizing flexible control of network traffic and making the network more intelligent as a pipeline. The innovation of the core network and applications provides a good platform. The management of network traffic has always been an important part of network system security, including the management of application traffic such as BT, P2P, and illegal website access. The timely processing of abnormal traffic such as SPAM and DDOS has become one of the most important measures to realize network system security. [0003] Traditional network switches forward data through ...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to solve the unreasonable, low efficiency of the network topology existing in the prior art and the protection shortcomings that cannot be used for active security defense of the SDN network, and the proposed method for the active security defense of the SDN network based on information entropy calculation method

Images