基于SDN的家用路由器安全审计工具

Yu Wang; Wei Li; Zhou Jun Li

doi:10.15918/j.tbit1001-0645.2019.07.014

基于SDN的家用路由器安全审计工具

Yu Wang
, Wei Li
, Zhou Jun Li

计算机学院

Beihang University

科研成果: 期刊稿件 › 文章 › 同行评审

摘要

In this paper, a design and implementation method was proposed for the security audit function of wireless router based on OpenFlow protocol in the threat environment such as botnet. It was designed to detect the abnormality of the router's traffic through information entropy calculation and arranged the detection system in SDN (software defined network) architecture to implement the control and display functions. The experimental results show that the entire system can detect the DDoS attack in the network, and the entire system runs only in 8 MB memory, and the network load is only 2.67%.

投稿的翻译标题	Design of the Security Audit Function for SDN-Based Home Router
源语言	繁体中文
页（从-至）	743-749
页数	7
期刊	Beijing Ligong Daxue Xuebao/Transaction of Beijing Institute of Technology
卷	39
期	7
DOI	https://doi.org/10.15918/j.tbit1001-0645.2019.07.014
出版状态	已出版 - 1 7月 2019

关键词

DDoS attack
Information entropy
OpenFlow protocol
Security audit
Software defined network

访问文件

10.15918/j.tbit1001-0645.2019.07.014

其它文件与链接

链接到 Scopus 的出版物

引用此

@article{c7ef89a4753849899639ea044acbf923,

title = "基于SDN的家用路由器安全审计工具",

abstract = "In this paper, a design and implementation method was proposed for the security audit function of wireless router based on OpenFlow protocol in the threat environment such as botnet. It was designed to detect the abnormality of the router's traffic through information entropy calculation and arranged the detection system in SDN (software defined network) architecture to implement the control and display functions. The experimental results show that the entire system can detect the DDoS attack in the network, and the entire system runs only in 8 MB memory, and the network load is only 2.67\%.",

keywords = "DDoS attack, Information entropy, OpenFlow protocol, Security audit, Software defined network",

author = "Yu Wang and Wei Li and Li, \{Zhou Jun\}",

year = "2019",

month = jul,

day = "1",

doi = "10.15918/j.tbit1001-0645.2019.07.014",

language = "繁体中文",

volume = "39",

pages = "743--749",

journal = "Beijing Ligong Daxue Xuebao/Transaction of Beijing Institute of Technology",

issn = "1001-0645",

publisher = "Beijing Institute of Technology",

number = "7",

}

TY - JOUR

T1 - 基于SDN的家用路由器安全审计工具

AU - Wang, Yu

AU - Li, Wei

AU - Li, Zhou Jun

PY - 2019/7/1

Y1 - 2019/7/1

N2 - In this paper, a design and implementation method was proposed for the security audit function of wireless router based on OpenFlow protocol in the threat environment such as botnet. It was designed to detect the abnormality of the router's traffic through information entropy calculation and arranged the detection system in SDN (software defined network) architecture to implement the control and display functions. The experimental results show that the entire system can detect the DDoS attack in the network, and the entire system runs only in 8 MB memory, and the network load is only 2.67%.

AB - In this paper, a design and implementation method was proposed for the security audit function of wireless router based on OpenFlow protocol in the threat environment such as botnet. It was designed to detect the abnormality of the router's traffic through information entropy calculation and arranged the detection system in SDN (software defined network) architecture to implement the control and display functions. The experimental results show that the entire system can detect the DDoS attack in the network, and the entire system runs only in 8 MB memory, and the network load is only 2.67%.

KW - DDoS attack

KW - Information entropy

KW - OpenFlow protocol

KW - Security audit

KW - Software defined network

UR - https://www.scopus.com/pages/publications/85072226236

U2 - 10.15918/j.tbit1001-0645.2019.07.014

DO - 10.15918/j.tbit1001-0645.2019.07.014

M3 - 文章

AN - SCOPUS:85072226236

SN - 1001-0645

VL - 39

SP - 743

EP - 749

JO - Beijing Ligong Daxue Xuebao/Transaction of Beijing Institute of Technology

JF - Beijing Ligong Daxue Xuebao/Transaction of Beijing Institute of Technology

IS - 7

ER -

基于SDN的家用路由器安全审计工具

摘要

关键词

访问文件

其它文件与链接

指纹

引用此