中圖分類號：TP393
文獻標識碼：A
DOI： 10.19358/j.issn.2096-5133.2020.04.002
引用格式：鄭忠斌，黎聰，王朝棟.一種面向軟件定義網(wǎng)絡的安全態(tài)勢感知方法［J］.信息技術與網(wǎng)絡安全，2020,39（5）：5-12.

A security situation awareness method for software defined network

Abstract： With the rapid development of Internet infrastructure and the constant emergence of new applications,denialofservice attack as a typical example of network layer attack is always the object that security personnel focus on preventing.Emerging as it is,SDN network also risks of getting denialofservice attack in its control layer and infrastructure layer.Among the current security technologies,the unique advantages of Network Security Situational Awareness technology have rendered NSSA competitive in applying both to traditional network model and SDN.Hence this paper studies the application of algorithms in the network security situational awareness,and implements a JDLmultisensordatafusionbased network security situational awareness model,applied to SDN network perception and evaluation of Denial of Service attacks.The experimental results show that the false alarm rate (negative positive) and nonresponse rate (positive negative) of fusion decision have both remarkably decreased compared with the IDS method,and the situational value of the output is of certain accuracy,which is in line with the intuitive evaluation results of system administrator.

Key words : network security;situational awareness;software defined network;data fusion;denial of service attacks