The software definition network (SDN) provides a high degree of openness and programmability for the network by separating data and controlling platforms. In view of the lack of the network bottleneck in the SDN active defense framework in the existing work, the SDN-based distributed deception defense system DDS for civil aviation information network is put forward. First, a multi-layer partitioning algorithm is used to divide it into different regions according to the device attributes of the civil aviation information physical network. On this basis, different deceptive topologies and deception strategies are designed for each area. Under the assumption that the attacker has successfully invaded the network, but the hidden host position is not clear, the various regions in the system perform the cheating task according to the corresponding deception topology and the policy. The experiments show that the system can effectively interfere with the investigation behavior, gain time for the defense, and the area division divides the number of nodes into 3 areas with only 11.9 ms.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Research of Distributed Deceptive Defense System of Civil Aviation Information Network on SDN


    Beteiligte:
    Lin, Su (Autor:in)


    Erscheinungsdatum :

    01.10.2019


    Format / Umfang :

    232404 byte




    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch




    Russia's civil aviation network

    Stockwell, R.E. | Engineering Index Backfile | 1958



    Fidelity considerations for civil aviation distributed simulations

    Roza, Manfred / Voogd, Jeroen / va, Paul | AIAA | 2000


    Civil aviation

    Engineering Index Backfile | 1951