The software definition network (SDN) provides a high degree of openness and programmability for the network by separating data and controlling platforms. In view of the lack of the network bottleneck in the SDN active defense framework in the existing work, the SDN-based distributed deception defense system DDS for civil aviation information network is put forward. First, a multi-layer partitioning algorithm is used to divide it into different regions according to the device attributes of the civil aviation information physical network. On this basis, different deceptive topologies and deception strategies are designed for each area. Under the assumption that the attacker has successfully invaded the network, but the hidden host position is not clear, the various regions in the system perform the cheating task according to the corresponding deception topology and the policy. The experiments show that the system can effectively interfere with the investigation behavior, gain time for the defense, and the area division divides the number of nodes into 3 areas with only 11.9 ms.
Research of Distributed Deceptive Defense System of Civil Aviation Information Network on SDN
01.10.2019
232404 byte
Aufsatz (Konferenz)
Elektronische Ressource
Englisch
Russia's civil aviation network
Engineering Index Backfile | 1958
|Engineering Index Backfile | 1951