中图分类号：TP393
文献标识码：A
DOI：10.19358/j.issn.2096-5133.2020.04.002
引用格式：郑忠斌，黎聪，王朝栋.一种面向软件定义网络的安全态势感知方法［J］.信息技术与网络安全，2020,39（5）：5-12.

A security situation awareness method for software defined network

Abstract：With the rapid development of Internet infrastructure and the constant emergence of new applications,denialofservice attack as a typical example of network layer attack is always the object that security personnel focus on preventing.Emerging as it is,SDN network also risks of getting denialofservice attack in its control layer and infrastructure layer.Among the current security technologies,the unique advantages of Network Security Situational Awareness technology have rendered NSSA competitive in applying both to traditional network model and SDN.Hence this paper studies the application of algorithms in the network security situational awareness,and implements a JDLmultisensordatafusionbased network security situational awareness model,applied to SDN network perception and evaluation of Denial of Service attacks.The experimental results show that the false alarm rate (negative positive) and nonresponse rate (positive negative) of fusion decision have both remarkably decreased compared with the IDS method,and the situational value of the output is of certain accuracy,which is in line with the intuitive evaluation results of system administrator.

Key words :network security;situational awareness;software defined network;data fusion;denial of service attacks