CN106453367B - 一种基于sdn的防地址扫描攻击的方法及系统 - Google Patents
一种基于sdn的防地址扫描攻击的方法及系统 Download PDFInfo
- Publication number
- CN106453367B CN106453367B CN201610955063.1A CN201610955063A CN106453367B CN 106453367 B CN106453367 B CN 106453367B CN 201610955063 A CN201610955063 A CN 201610955063A CN 106453367 B CN106453367 B CN 106453367B
- Authority
- CN
- China
- Prior art keywords
- sdn
- address
- message
- flow table
- switch
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 28
- 230000004044 response Effects 0.000 claims description 17
- 230000002265 prevention Effects 0.000 claims description 14
- 230000008569 process Effects 0.000 claims description 9
- 239000000126 substance Substances 0.000 claims description 8
- 239000000284 extract Substances 0.000 claims description 3
- 230000006870 function Effects 0.000 description 7
- 238000010586 diagram Methods 0.000 description 6
- 238000012795 verification Methods 0.000 description 5
- 230000008859 change Effects 0.000 description 3
- 238000012360 testing method Methods 0.000 description 3
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000012545 processing Methods 0.000 description 2
- 238000007792 addition Methods 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 230000008520 organization Effects 0.000 description 1
- 238000004088 simulation Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
- H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/10—Mapping addresses of different types
- H04L61/103—Mapping addresses of different types across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
配置项 | 含义 |
基于SDN的防地址扫描攻击功能 | 打开或关闭基于SDN的防地址扫描攻击功能 |
配置项 | 含义 |
IP地址 | 此字段表明SDN交换机的接口IP地址 |
IP地址掩码 | 此字段表明SDN交换机的接口IP地址掩码 |
交换机id | 此字段表明SDN交换机的id,交换机系统MAC地址表明交换机id |
交换机端口 | 此字段表明SDN交换机的端口 |
配置项 | 含义 |
基于SDN的防地址扫描攻击功能 | 打开或关闭基于SDN的防地址扫描攻击功能 |
配置项 | 含义 |
IP地址 | 此字段表明SDN交换机的接口IP地址 |
IP地址掩码 | 此字段表明SDN交换机的接口IP地址掩码 |
交换机id | 此字段表明SDN交换机的id,交换机系统MAC地址表明交换机id |
交换机端口 | 此字段表明SDN交换机的端口 |
Claims (7)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201610955063.1A CN106453367B (zh) | 2016-10-27 | 2016-10-27 | 一种基于sdn的防地址扫描攻击的方法及系统 |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201610955063.1A CN106453367B (zh) | 2016-10-27 | 2016-10-27 | 一种基于sdn的防地址扫描攻击的方法及系统 |
Publications (2)
Publication Number | Publication Date |
---|---|
CN106453367A CN106453367A (zh) | 2017-02-22 |
CN106453367B true CN106453367B (zh) | 2020-01-24 |
Family
ID=58179322
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201610955063.1A Active CN106453367B (zh) | 2016-10-27 | 2016-10-27 | 一种基于sdn的防地址扫描攻击的方法及系统 |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN106453367B (zh) |
Families Citing this family (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108011825B (zh) * | 2017-11-10 | 2020-07-28 | 深圳市泰信通信息技术有限公司 | 一种基于软件定义网络的多网络设备互联现实方法及系统 |
CN109495352B (zh) * | 2018-12-27 | 2021-06-08 | 新华三技术有限公司 | 一种传输路径的确定方法和装置 |
CN117254978B (zh) * | 2023-11-16 | 2024-02-09 | 苏州元脑智能科技有限公司 | 一种异常扫描行为的处理方法及装置 |
Family Cites Families (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR101761798B1 (ko) * | 2013-08-20 | 2017-07-26 | 한국전자통신연구원 | 제어 네트워크에서의 스캐닝 공격 탐지 장치 |
CN104468624B (zh) * | 2014-12-22 | 2018-01-02 | 上海斐讯数据通信技术有限公司 | Sdn控制器、路由/交换设备及网络防御方法 |
CN104901890B (zh) * | 2015-06-24 | 2018-01-02 | 上海斐讯数据通信技术有限公司 | 一种sdn的路由生成、匹配方法和系统 |
CN105827628A (zh) * | 2016-04-29 | 2016-08-03 | 上海斐讯数据通信技术有限公司 | 一种基于软件定义网络的防源地址欺骗的方法 |
-
2016
- 2016-10-27 CN CN201610955063.1A patent/CN106453367B/zh active Active
Also Published As
Publication number | Publication date |
---|---|
CN106453367A (zh) | 2017-02-22 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US10560280B2 (en) | Network security analysis for smart appliances | |
US10826821B2 (en) | Flow path detection | |
US7823204B2 (en) | Method and apparatus for detecting intrusions on a computer system | |
CN108449314B (zh) | 一种流量牵引方法和装置 | |
CN103763121A (zh) | 一种网络配置信息快速下发的方法及装置 | |
WO2016101870A1 (zh) | 网络攻击分析方法和装置 | |
CN106453367B (zh) | 一种基于sdn的防地址扫描攻击的方法及系统 | |
JP2009110270A (ja) | マルウエア検出装置、監視装置、マルウエア検出プログラム、およびマルウエア検出方法 | |
KR20160002269A (ko) | Sdn 기반의 arp 스푸핑 탐지장치 및 그 방법 | |
JP6834768B2 (ja) | 攻撃検知方法、攻撃検知プログラムおよび中継装置 | |
GB2505747A (en) | Remote port mirroring using IGMP publish/join functions to establish mirrored data streams | |
EP3286650B1 (en) | Network security analysis for smart appliances | |
US9984036B2 (en) | Communication system, control apparatus, communication method, and program | |
WO2024021495A1 (zh) | 云平台中的泛洪攻击的识别方法、装置、设备及存储介质 | |
CN110971391B (zh) | 报文转发方法及网络设备 | |
JP4532253B2 (ja) | フレーム転送装置及びフレームのループ抑止方法 | |
CN113114588B (zh) | 数据处理方法、装置、电子设备和存储介质 | |
US20090316597A1 (en) | Information processing apparatus | |
CN111654558B (zh) | Arp交互与内网流量转发方法、装置和设备 | |
Muthumanikandan et al. | Switch failure detection in software-defined networks | |
JP2019125914A (ja) | 通信装置及びプログラム | |
JP2006013732A (ja) | ルーティング装置および情報処理装置の認証方法 | |
US20170048128A1 (en) | Locating traffic origin in a network | |
JP2018098727A (ja) | サービスシステム、通信プログラム、及び通信方法 | |
CN111327590A (zh) | 一种攻击处理方法及装置 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant | ||
TR01 | Transfer of patent right | ||
TR01 | Transfer of patent right |
Effective date of registration: 20201125 Address after: Room 10242, No. 260, Jiangshu Road, Xixing street, Binjiang District, Hangzhou City, Zhejiang Province Patentee after: Hangzhou Jiji Intellectual Property Operation Co.,Ltd. Address before: 201616 Shanghai city Songjiang District Sixian Road No. 3666 Patentee before: Phicomm (Shanghai) Co.,Ltd. |
|
TR01 | Transfer of patent right |
Effective date of registration: 20201218 Address after: 8319 Yanshan Road, Bengbu City, Anhui Province Patentee after: Bengbu Lichao Information Technology Co.,Ltd. Address before: Room 10242, No. 260, Jiangshu Road, Xixing street, Binjiang District, Hangzhou City, Zhejiang Province Patentee before: Hangzhou Jiji Intellectual Property Operation Co.,Ltd. |
|
TR01 | Transfer of patent right | ||
TR01 | Transfer of patent right |
Effective date of registration: 20210316 Address after: 313000 room 1019, Xintiandi commercial office, Yishan street, Wuxing District, Huzhou, Zhejiang, China Patentee after: Huzhou YingLie Intellectual Property Operation Co.,Ltd. Address before: 8319 Yanshan Road, Bengbu City, Anhui Province Patentee before: Bengbu Lichao Information Technology Co.,Ltd. |
|
TR01 | Transfer of patent right | ||
TR01 | Transfer of patent right |
Effective date of registration: 20230404 Address after: 570100 collective household of qunshang community, No. 582 qunshang village, Meilan District, Haikou City, Hainan Province Patentee after: Yang Dahai Address before: 313000 room 1019, Xintiandi commercial office, Yishan street, Wuxing District, Huzhou, Zhejiang, China Patentee before: Huzhou YingLie Intellectual Property Operation Co.,Ltd. |
|
TR01 | Transfer of patent right |