基于区块链的SDN数据平面错误流规则检测
False flow rule detection in SDN data plane based on blockchain
投稿时间:2022-01-04  修订日期:2022-01-04
DOI:
中文关键词: 软件定义网络  区块链  流规则检测  共识算法
英文关键词: Software-Defined Networking (SDN)  blockchain  flow rule detection  consensus algorithm
基金项目:国家自然科学基金项目,湖北省自然科学基金一般面上项目
作者单位
唐菀 中南民族大学 计算机科学学院 
张艳 中南民族大学计算机科学学院 
杨喜敏 中南民族大学计算机科学学院 
刘艳萍 同盾科技有限公司 
刘宇宸 中南民族大学计算机科学学院 
摘要点击次数: 174
全文下载次数: 0
中文摘要:
      软件定义网络(SDN)的数据平面只负责流量转发,并不具备识别流规则是否正确的功能,使得攻击者通过向数据平面注入错误流规则,导致网络拥塞、信息泄露、网络瘫痪等严重后果。鉴于区块链的可追溯、不可篡改等特性,提出一个在控制平面运行的基于区块链的错误流规则检测机制(FFRD-BC),当控制器向数据平面下发流规则的同时将其上传至区块链中,通过随机选择数据平面中的流规则并验证其是否存在于区块链中,来检测数据平面中第三方行动者注入的错误流规则。其次,在流规则检测阶段引入了基于实用拜占庭容错共识算法的投票验证策略,避免由于区块链节点一致性不稳定而导致的误检情况。实验结果表明,随着检测次数的增加,提出的FFRD-BC机制能够有效检测数据平面中第三方行动者注入的错误流规则,并且与不执行投票验证策略相比有效降低了误检率。
英文摘要:
      The data plane of Software-Defined Networking (SDN) is only responsible for traffic forwarding, and does not have the function of identifying whether flow rules are correct. Therefore, attackers inject false flow rules into data plane, result in network congestion, information leakage, even network breakdown. In view of the traceable and tamper-proof characteristics of blockchain, in this paper, a false flow rule detection mechanism based on blockchain (FFRD-BC) running on control plane is proposed. SDN controllers in control plane upload flow rules to the blockchain while delivering them to the data plane. False flow rules injected by the third man are detected by randomly selecting flow rules in data plane and verifying whether they exist in blockchain. Furthermore, the vote-verification strategy based on the Practical Byzantine Fault Tolerance consensus algorithm is introduced in flow rule detection stage to avoid the error detection situation caused by the unstable consistency of blockchain nodes. Experimental results show that, with the detection times increasing, the proposed FFRD-BC mechanism can detect the false flow rules injected by the third man in data plane effectively, and reduce the false detection rate compared with the non-vote-verification strategy.
View Fulltext   查看/发表评论  下载PDF阅读器
关闭