基于SDN的家用路由器安全审计工具

Yu Wang; Wei Li; Zhou Jun Li

doi:10.15918/j.tbit1001-0645.2019.07.014

基于SDN的家用路由器安全审计工具

Translated title of the contribution: Design of the Security Audit Function for SDN-Based Home Router

Yu Wang
, Wei Li
, Zhou Jun Li

School of Computer Science and Engineering

Beihang University

Research output: Contribution to journal › Article › peer-review

Abstract

In this paper, a design and implementation method was proposed for the security audit function of wireless router based on OpenFlow protocol in the threat environment such as botnet. It was designed to detect the abnormality of the router's traffic through information entropy calculation and arranged the detection system in SDN (software defined network) architecture to implement the control and display functions. The experimental results show that the entire system can detect the DDoS attack in the network, and the entire system runs only in 8 MB memory, and the network load is only 2.67%.

Translated title of the contribution	Design of the Security Audit Function for SDN-Based Home Router
Original language	Chinese (Traditional)
Pages (from-to)	743-749
Number of pages	7
Journal	Beijing Ligong Daxue Xuebao/Transaction of Beijing Institute of Technology
Volume	39
Issue number	7
DOIs	https://doi.org/10.15918/j.tbit1001-0645.2019.07.014
State	Published - 1 Jul 2019

Access to Document

10.15918/j.tbit1001-0645.2019.07.014

Cite this

@article{c7ef89a4753849899639ea044acbf923,

title = "基于SDN的家用路由器安全审计工具",

abstract = "In this paper, a design and implementation method was proposed for the security audit function of wireless router based on OpenFlow protocol in the threat environment such as botnet. It was designed to detect the abnormality of the router's traffic through information entropy calculation and arranged the detection system in SDN (software defined network) architecture to implement the control and display functions. The experimental results show that the entire system can detect the DDoS attack in the network, and the entire system runs only in 8 MB memory, and the network load is only 2.67\%.",

keywords = "DDoS attack, Information entropy, OpenFlow protocol, Security audit, Software defined network",

author = "Yu Wang and Wei Li and Li, \{Zhou Jun\}",

year = "2019",

month = jul,

day = "1",

doi = "10.15918/j.tbit1001-0645.2019.07.014",

language = "繁体中文",

volume = "39",

pages = "743--749",

journal = "Beijing Ligong Daxue Xuebao/Transaction of Beijing Institute of Technology",

issn = "1001-0645",

publisher = "Beijing Institute of Technology",

number = "7",

}

TY - JOUR

T1 - 基于SDN的家用路由器安全审计工具

AU - Wang, Yu

AU - Li, Wei

AU - Li, Zhou Jun

PY - 2019/7/1

Y1 - 2019/7/1

N2 - In this paper, a design and implementation method was proposed for the security audit function of wireless router based on OpenFlow protocol in the threat environment such as botnet. It was designed to detect the abnormality of the router's traffic through information entropy calculation and arranged the detection system in SDN (software defined network) architecture to implement the control and display functions. The experimental results show that the entire system can detect the DDoS attack in the network, and the entire system runs only in 8 MB memory, and the network load is only 2.67%.

AB - In this paper, a design and implementation method was proposed for the security audit function of wireless router based on OpenFlow protocol in the threat environment such as botnet. It was designed to detect the abnormality of the router's traffic through information entropy calculation and arranged the detection system in SDN (software defined network) architecture to implement the control and display functions. The experimental results show that the entire system can detect the DDoS attack in the network, and the entire system runs only in 8 MB memory, and the network load is only 2.67%.

KW - DDoS attack

KW - Information entropy

KW - OpenFlow protocol

KW - Security audit

KW - Software defined network

UR - https://www.scopus.com/pages/publications/85072226236

U2 - 10.15918/j.tbit1001-0645.2019.07.014

DO - 10.15918/j.tbit1001-0645.2019.07.014

M3 - 文章

AN - SCOPUS:85072226236

SN - 1001-0645

VL - 39

SP - 743

EP - 749

JO - Beijing Ligong Daxue Xuebao/Transaction of Beijing Institute of Technology

JF - Beijing Ligong Daxue Xuebao/Transaction of Beijing Institute of Technology

IS - 7

ER -

基于SDN的家用路由器安全审计工具

Abstract

Access to Document

Other files and links

Fingerprint

Cite this