The software definition network (SDN) provides a high degree of openness and programmability for the network by separating data and controlling platforms. In view of the lack of the network bottleneck in the SDN active defense framework in the existing work, the SDN-based distributed deception defense system DDS for civil aviation information network is put forward. First, a multi-layer partitioning algorithm is used to divide it into different regions according to the device attributes of the civil aviation information physical network. On this basis, different deceptive topologies and deception strategies are designed for each area. Under the assumption that the attacker has successfully invaded the network, but the hidden host position is not clear, the various regions in the system perform the cheating task according to the corresponding deception topology and the policy. The experiments show that the system can effectively interfere with the investigation behavior, gain time for the defense, and the area division divides the number of nodes into 3 areas with only 11.9 ms.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Research of Distributed Deceptive Defense System of Civil Aviation Information Network on SDN


    Contributors:
    Lin, Su (author)


    Publication date :

    2019-10-01


    Size :

    232404 byte




    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English




    Russia's civil aviation network

    Stockwell, R.E. | Engineering Index Backfile | 1958



    Fidelity considerations for civil aviation distributed simulations

    Roza, Manfred / Voogd, Jeroen / va, Paul | AIAA | 2000


    Civil aviation

    Phillips, Celia M. | GWLB - Gottfried Wilhelm Leibniz Bibliothek | 1979