基于核函数的软件定义网络DDoS实时安全系统.PDFVIP

37 3 Vol. 37 No. 3 第 卷第 期 计算机应用研究 录用定稿 Application Research of Computers Accepted Paper 基于核函数的软件定义网络DDoS 实时安全系统* 刘 敏，滕 华，何先波 (西华师范大学 计算机学院, 四川 南充 637009) 摘 要：针对软件定义网络中DDoS 攻击的检测准确率与延迟较长的问题，提出了一种基于核函数的软件定义网络 DDoS 实时安全系统。首先，每个周期提取软件定义网络的报文头信息，并组织成矩阵形式；其次，采用马氏距离 分析相邻特征向量的显著变化，设计了两个核函数综合评估攻击行为的流量；最终，采用谱聚类技术与协方差统计 信息自动地定位攻击者。基于真实软件定义网络进行了实验，结果显示该安全系统实现了较高的检测准确率，并且 实现了理想的处理时间。 关键词：软件定义网络；网络安全；拒绝服务攻击；核函数；谱聚类技术 中图分类号：TP393 doi: 10.19734/j.issn.1001-3695.2018.09.0659 Real time DDoS security system of software definition networks based on kernel functions Liu Min, Teng Hua, He Xianbo (Computer Academy, China West Normal University, Nanchong Sichuan 637009, China) Abstract: Aiming at the problems of log detection accuracy and long delay of DDoS(Distributed Denial-of-Service) attacks in the software definition networks, This paper proposed a real time DDoS security system of software definition networks based on kernel functions. Firstly, it abstracted the packet header fields of software definition networks periodly, and formed the abstracted information as matrices; then, it adopted the Mahalanobis distance to analyze the significant change of continuous feature vectors, and it designed two kernel functions to evaluate the behavior flows of attacks ; lastly, the attackers are identified by the spectral clustering technique and the covariance statistical information. Experimental results based on the real software definition networks show that the proposed security system