基于博弈的异构控制器云安全策略研究Gamemodelbasedsecurity.PDFVIP

第4 卷第9 期 网络与信息安全学报 Vol.4 No.9 2018 年9 月 Chinese Journal of Network and Information Security September 2018 基于博弈的异构控制器云安全策略研究 胡军台，武振宇，付晓，王逸超 （国网河南省电力公司平顶山供电公司，河南平顶山 450052 ） 摘 要：在软件定义数据中心网络的控制层采用多个异构控制器是提升其安全的一种有效方式。针对网络不 同安全需求下控制器的部署策略问题，提出了一种博弈模型。具体地，首先，利用博弈论知识刻画了攻防博 弈模型，求解纳什均衡，进而指导设计安全策略；其次，在均衡基础上分析攻防策略行为对控制层安全状态 的影响；最后，仿真结果表明提出的均衡策略的有效性，并描述了攻防策略交互的动态性。 关键词：软件定义数据中心网络；控制器；网络安全；博弈 中图分类号：TP393.08 文献标识码：A doi: 10.11959/j.issn.2096-109x.2018075 Game model based security strategy of heterogeneous controllers in the cloud HU Juntai, WU Zhenyu, FU Xiao, WANG Yichao State Grid Pingdingshan Power Supply Company, Pingdingshan 450052, China Abstract: Deploying multiple heterogeneous controllers at the control level of a software-defined data center is an effective way to increase security. In view of the deployment strategy of controllers under different security re- quirements of the network, a game model was presented. Specifically, firstly, the game theory was used to depict the attack and defense game model and solve the Nash equilibrium, and then guided the design of security strategy. Secondly, the impact of the strategy of attack and defense on the security status of the control layer were analyzed. Finally, the simulation results show the effectiveness of the proposed equilibrium strategy, and describe the dynamic interaction strategy. Key words: softwares defined data center network, controller, network security, game 新的安全威胁[3] ，尤其控制器作为核心组件，极 1 引言