CN108449441A - The IP address jump method and device of software defined network SDN - Google Patents
The IP address jump method and device of software defined network SDN Download PDFInfo
- Publication number
- CN108449441A CN108449441A CN201710084288.9A CN201710084288A CN108449441A CN 108449441 A CN108449441 A CN 108449441A CN 201710084288 A CN201710084288 A CN 201710084288A CN 108449441 A CN108449441 A CN 108449441A
- Authority
- CN
- China
- Prior art keywords
- time interval
- address
- parameter
- bound
- property
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/25—Mapping addresses of the same type
- H04L61/2503—Translation of Internet protocol [IP] addresses
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The present invention provides the IP address jump method of software defined network SDN a kind of and devices.Wherein, this method includes：Compare current calculated value and predetermined threshold, wherein the current calculated value is the difference of last moment and the infected host slope of subsequent time；According to comparison result, next IP address bound-time interval is set.Through the invention, solve the problems, such as that the IP address saltus step based on time dimension is relatively simple in the related technology, has reached the technique effect of IP address flexible hopping.
Description
Technical field
The present invention relates to the communications fields, a kind of IP address jump method in particular to software defined network SDN and
Device.
Background technology
With development in science and technology, incident is that internet security situation is increasingly serious, the defence of traditional internet security
Method cannot work well.Mobile target defense technique (MTD) is American science technical committee proposition in recent years
Cyberspace " change game rule " one of revolutionary technology.It is totally different from previous network security Research Thinking,
Increase the attack difficulty and cost of attacker by various, continually changing structure, evaluation and deployment mechanisms and strategy, has
The chance that effect limits fragility exposure and attacked.IP address saltus step is exactly an important technology in MTD, however is based on time dimension
The IP address jump method of degree is never studied well.
For in the related technology, the relatively simple problem of the IP address saltus step based on time dimension not yet proposes effective
Solution.
Invention content
An embodiment of the present invention provides the IP address jump method of software defined network SDN a kind of and devices, at least to solve
The certainly relatively simple problem of the IP address saltus step based on time dimension in the related technology.
According to one embodiment of present invention, a kind of IP address jump method of software defined network SDN is provided, it is special
Sign is, including：Compare current calculated value and predetermined threshold, wherein the current calculated value is last moment and subsequent time
The difference of infected host slope；According to comparison result, next IP address bound-time interval is set.
Optionally, described according to comparison result, setting IP address bound-time interval includes：It is small in the current calculated value
When the predetermined threshold, according to guarantee property parameter, the property hidden parameter and current IP address bound-time interval calculation
Next IP address bound-time interval, wherein the guarantee property parameter be current network handling capacity and traditional network handling capacity it
Between ratio, ratio of the property the hidden parameter between the successful detection times of attacker and total detection times；Work as described
When preceding calculated value is more than the predetermined threshold, it is arranged in the way of exponential successively decrease between next IP address bound-time
Every.
Optionally, described according to guarantee property parameter, the property hidden parameter and current IP address bound-time interval calculation institute
Stating next IP address bound-time interval includes：Respectively using guarantee property parameter, the property hidden parameter and current IP address saltus step
Time interval obtains at least two bound-time intervals in such a way that gradient declines；Between at least two bound-time
Select a time interval as next IP address bound-time interval every middle, wherein the time interval selected is described
Minimum time interval at least two time intervals.
Optionally, according to described in guarantee property parameter, the property hidden parameter and current IP address bound-time interval calculation
Before next IP address bound-time interval, further include：The desired value of the guarantee property parameter and the property the hidden parameter are set
Desired value.
Optionally, the predetermined threshold isWherein, I (t) is indicated in the infected master of t moment
The quantity of machine.
According to another embodiment of the invention, a kind of IP address saltus step device of software defined network SDN is provided,
It is characterized in that, including：Comparison module, for comparing current calculated value and predetermined threshold, wherein the current calculated value is upper one
The difference at moment and the infected host slope of subsequent time；Setup module, for according to comparison result, next IP address being arranged and jumps
Become time interval.
Optionally, the setup module includes：First setting unit, it is described predetermined for being less than in the current calculated value
When threshold value, according to next IP address described in guarantee property parameter, the property hidden parameter and current IP address bound-time interval calculation
Bound-time interval, wherein ratio of the guarantee property parameter between current network handling capacity and traditional network handling capacity, institute
State ratio of the property the hidden parameter between the successful detection times of attacker and total detection times；Second setting unit is used for
When the current calculated value is more than the predetermined threshold, when next IP address saltus step is set in the way of exponential successively decrease
Between be spaced.
Optionally, first setting unit includes：Subelement is obtained, for respectively using guarantee property parameter, the property hidden
Parameter and current IP address bound-time interval obtain at least two bound-time intervals in such a way that gradient declines；Choosing
Subelement is selected, for selecting a time interval to be jumped as next IP address at least two bound-time interval
Become time interval, wherein the time interval selected is time interval minimum at least two time interval.
Optionally, the setup module further includes：Third setting unit, for joining according to guarantee property parameter, the property hidden
Before next IP address bound-time interval described in number and current IP address bound-time interval calculation, the guarantee is set
The desired value of the desired value of parameter and the property the hidden parameter.
Optionally, the predetermined threshold isWherein, I (t) is indicated in the infected master of t moment
The quantity of machine.
According to still another embodiment of the invention, a kind of storage medium is additionally provided.The storage medium is set as storage and uses
In the program code for executing following steps：
Compare current calculated value and predetermined threshold, wherein the current calculated value is that last moment and subsequent time are felt
Contaminate the difference of host slope；According to comparison result, next IP address bound-time interval is set.
Through the invention, more current calculated value and predetermined threshold, wherein the current calculated value is last moment and next
The difference of moment infected host slope；According to comparison result, next IP address bound-time interval is set.That is, real
When more current calculated value and predetermined threshold, and next IP address bound-time interval is set dynamically according to comparison result, can be with
Solve the problems, such as that the IP address saltus step based on time dimension is relatively simple in the related technology, reaches the technology of IP address flexible hopping
Effect.
Description of the drawings
Attached drawing described herein is used to provide further understanding of the present invention, and is constituted part of this application, this hair
Bright illustrative embodiments and their description are not constituted improper limitations of the present invention for explaining the present invention.In the accompanying drawings：
Fig. 1 is the IP address jump method flow chart of software defined network SDN according to the ... of the embodiment of the present invention；
Fig. 2 is the IP address jump method flow chart of another software defined network SDN according to the ... of the embodiment of the present invention；
Fig. 3 is the structure diagram of the IP address saltus step device of software defined network SDN according to the ... of the embodiment of the present invention；
Fig. 4 is the structure diagram (one) of the IP address saltus step device of software defined network SDN according to the ... of the embodiment of the present invention；
Fig. 5 is the structure diagram (two) of the IP address saltus step device of software defined network SDN according to the ... of the embodiment of the present invention；
Fig. 6 is the structure diagram (three) of the IP address saltus step device of software defined network SDN according to the ... of the embodiment of the present invention.
Specific implementation mode
Come that the present invention will be described in detail below with reference to attached drawing and in conjunction with the embodiments.It should be noted that not conflicting
In the case of, the features in the embodiments and the embodiments of the present application can be combined with each other.
It should be noted that term " first " in description and claims of this specification and above-mentioned attached drawing, "
Two " etc. be for distinguishing similar object, without being used to describe specific sequence or precedence.
Embodiment 1
A kind of IP address jump method of software defined network SDN is provided in the present embodiment, and Fig. 1 is according to the present invention
The IP address jump method flow chart of the software defined network SDN of embodiment, as shown in Figure 1, the flow includes the following steps：
Step S102, more current calculated value and predetermined threshold, wherein the current calculated value is last moment and lower a period of time
Carve the difference of infected host slope；
Next IP address bound-time interval is arranged according to comparison result in step S104.
Optionally, in the present embodiment, above-mentioned software defined network (Software Defined Network, referred to as
SDN the application scenarios of IP address jump method) include but is not limited to：IP address saltus step based on time dimension is answered at this
With under scene, more current calculated value and predetermined threshold, wherein the current calculated value is that last moment and subsequent time are infected
The difference of host slope；According to comparison result, next IP address bound-time interval is set.That is, relatively more current in real time
Calculated value and predetermined threshold, and next IP address bound-time interval is set dynamically according to comparison result, related skill can be solved
The relatively simple problem of the IP address saltus step based on time dimension, reaches the technique effect of IP address flexible hopping in art.
With reference to specific example, this implementation is illustrated.
This exemplary purpose is overcome the deficiencies in the prior art, it is proposed that one kind based on software defined network (SDN) when
Between the adaptive saltus step of IP address in dimension strategy.Specifically comprise the following steps：
Step S11, it is proposed that two assessment parameters：(1) guarantee property parameter (Φ)；(2) property hidden parameter (Θ).
A threshold value is arranged in step S12, the mechanism based on worm breeding.
Step S13 establishes corresponding two models according to two kinds of situations respectively, and (1) is when less than threshold value and (2) are more than
When threshold value.The saltus step interval of next IP address can be calculated separately.
Step S14 periodically compares calculated value and threshold value, and S11 to S14 constantly safeguards calculated value through the above steps.
Originally exemplary advantageous effect is：It can be according to the requirement of system, to set two desired values：Guarantee property parameter objectives value
With the property hidden parameter objectives value, and gradient descent method can be used to obtain two optimal values.Controller can be according to desired value
The time interval of IP address saltus step is adjusted at any time, may be implemented the compromise of performance and robustness.When a threshold is exceeded, system meeting
Quickly increase the frequency of IP address saltus step to realize the defence bred to worm.
In one optionally embodiment, according to comparison result, setting IP address bound-time interval includes following step
Suddenly：
Step S21, in this prior calculated value be less than the predetermined threshold when, according to ensure property parameter, the property hidden parameter and
Current IP address bound-time interval calculation next IP address bound-time interval, wherein the guarantee parameter is current net
Ratio between network handling capacity and traditional network handling capacity, the property the hidden parameter are the successful detection times of attacker and total detection
Ratio between number；
It should be noted that above-mentioned predetermined threshold can beWherein, I (t) is indicated in t
Carve the quantity of infected host, i.e., the maximum value of infected host slope difference.
Step S22, when calculated value is more than the predetermined threshold in this prior, it is next in the way of exponential successively decrease this to be arranged
IP address bound-time interval.
Next IP address bound-time interval can be flexibly arranged in S21 to step S22 through the above steps.
Optionally, according to guarantee property parameter, the property hidden parameter and current IP address bound-time interval calculation, this is next
IP address bound-time interval includes the following steps：
Step S31, respectively using ensure property parameter, the property hidden parameter and current IP address bound-time interval, according to
The mode that gradient declines obtains at least two bound-time intervals；
Step S32 selects a time interval as next IP address in above-mentioned at least two bound-time interval
Bound-time interval, wherein the time interval selected is time interval minimum in above-mentioned at least two time interval.
S31 to step S32 through the above steps so that the setting at next IP address bound-time interval is relative to current net
Network is safer.
Optionally, according to guarantee property parameter, the property hidden parameter and current IP address bound-time interval calculation under this
It is further comprising the steps of before one IP address bound-time interval：
The desired value of the desired value and the property the hidden parameter of the guarantee parameter is arranged in step S41.
S41 through the above steps can adjust the time interval of IP address saltus step at any time according to desired value, may be implemented
The compromise of performance and robustness.
With reference to specific example, the present embodiment is illustrated.
First, two assessment parameters are proposed：(1) guarantee property parameter (Φ)；(2) property hidden parameter (Θ).Guarantee property parameter
(Φ) indicates handling capacity when using adaptive IP address jump method and handling capacity under traditional network situation
Ratio；The property hidden parameter (Θ) indicates the ratio of attacker successful detection times and the number detected in total.Secondly, I (t) tables
Show the quantity in t moment worm.Based on simple worm reproduction model and CAIDA data, calculate last moment and subsequent time by
Infect the difference of host slope, calculated value：And set a threshold value：It should
Threshold value is taken into account and is required of both performance and safety.Before reaching threshold value, IP address change frequency will be determining at one
Within the scope of, and after the threshold is reached, transformation period interval can be reduced rapidly.Then, two models are established, current threshold is analyzed
Value situation.When calculated value is less than threshold value, respectively using between guarantee property parameter and the property hidden parameter and current bound-time
Every next bound-time interval is calculated in the method declined with gradient.Respectively obtain two bound-time intervals.From
From the aspect of reaching better safety, always select in this calculated two interval smaller that time interval as
The time interval of IP address saltus step next time.When calculated value is more than threshold value, since it is considered that performance and robustness, IP address is jumped
Frequency should carry out effective the case where coping with worm breeding with exponential increase.In addition, guarantee property parameter is in the case not
It is conclusive parameter again, the property hidden parameter is more important at this time.Finally, periodically compare calculated value and threshold value, by above-mentioned
Step constantly safeguards calculated value, and (for details, reference can be made to the step S201 of Fig. 2 extremely for the comparison situation of Real-time Feedback calculated value and threshold value
Shown in step S207).
Through the above description of the embodiments, those skilled in the art can be understood that according to above-mentioned implementation
The method of example can add the mode of required general hardware platform to realize by software, naturally it is also possible to by hardware, but it is very much
In the case of the former be more preferably embodiment.Based on this understanding, technical scheme of the present invention is substantially in other words to existing
The part that technology contributes can be expressed in the form of software products, which is stored in a storage
In medium (such as ROM/RAM, magnetic disc, CD), including some instructions are used so that a station terminal equipment (can be mobile phone, calculate
Machine, server or network equipment etc.) execute method described in each embodiment of the present invention.
Embodiment 2
A kind of IP address saltus step device of software defined network SDN is additionally provided in the present embodiment, and the device is for real
Existing above-described embodiment and preferred embodiment, had carried out repeating no more for explanation.As used below, term " module "
The combination of the software and/or hardware of predetermined function may be implemented.Although device described in following embodiment is preferably with software
It realizes, but the realization of the combination of hardware or software and hardware is also that may and be contemplated.
Fig. 3 is the structure diagram of the IP address saltus step device of software defined network SDN according to the ... of the embodiment of the present invention, is such as schemed
Shown in 3, which includes：
1) comparison module 32, for comparing current calculated value and predetermined threshold, wherein the current calculated value is last moment
With the difference of the infected host slope of subsequent time；
2) setup module 34, for according to comparison result, next IP address bound-time interval to be arranged.
Optionally, in the present embodiment, above-mentioned software defined network (Software Defined Network, referred to as
SDN the application scenarios of IP address saltus step device) include but is not limited to：IP address saltus step based on time dimension is answered at this
With under scene, more current calculated value and predetermined threshold, wherein the current calculated value is that last moment and subsequent time are infected
The difference of host slope；According to comparison result, next IP address bound-time interval is set.That is, relatively more current in real time
Calculated value and predetermined threshold, and next IP address bound-time interval is set dynamically according to comparison result, related skill can be solved
The relatively simple problem of the IP address saltus step based on time dimension, reaches the technique effect of IP address flexible hopping in art.
Fig. 4 is the structure diagram (one) of the IP address saltus step device of software defined network SDN according to the ... of the embodiment of the present invention,
As shown in figure 4, setup module 34 includes：
1) the first setting unit 42 when being less than the predetermined threshold for calculated value in this prior, according to guarantee property parameter, is hided
Keeping away property parameter and current IP address bound-time interval calculation next IP address bound-time interval, wherein the guarantee
Ratio of the parameter between current network handling capacity and traditional network handling capacity, the property the hidden parameter are that attacker successfully detects
Ratio between number and total detection times；
2) the second setting unit 44 when being more than the predetermined threshold for calculated value in this prior, successively decreases according to exponential
Next IP address bound-time interval is arranged in mode.
By Fig. 4 shown devices, next IP address bound-time interval can be flexibly set.
Fig. 5 is the structure diagram (two) of the IP address saltus step device of software defined network SDN according to the ... of the embodiment of the present invention,
As shown in figure 5, the first setting unit 42 includes：
1) subelement 52 is obtained, for respectively using guarantee property parameter, the property hidden parameter and when current IP address saltus step
Between be spaced, by gradient decline in the way of obtain at least two bound-time intervals；
2) select subelement 54, for selected in at least two bound-times interval time interval as this under
One IP address bound-time interval, wherein the time interval selected is time interval minimum at least two time interval.
Pass through Fig. 5 shown devices so that the setting at next IP address bound-time interval is more pacified relative to current network
Entirely.
Fig. 6 is the structure diagram (three) of the IP address saltus step device of software defined network SDN according to the ... of the embodiment of the present invention,
As shown in fig. 6, setup module 34 further includes other than including the first setting unit 42 and the second setting unit 44：
1) third setting unit 62, for when according to guarantee property parameter, the property hidden parameter and current IP address saltus step
Between before interval calculation next IP address bound-time interval, the desired value and the property the hidden parameter of the guarantee parameter are set
Desired value.
By Fig. 6 shown devices, the time interval of IP address saltus step can be adjusted at any time according to desired value, may be implemented
The compromise of performance and robustness.
Optionally, which isWherein, I (t) is indicated in the infected host of t moment
Quantity.
It should be noted that above-mentioned modules can be realized by software or hardware, for the latter, Ke Yitong
Following manner realization is crossed, but not limited to this：Above-mentioned module is respectively positioned in same processor；Alternatively, above-mentioned modules are with arbitrary
The form of combination is located in different processors.
Embodiment 3
The embodiments of the present invention also provide a kind of storage mediums.Optionally, in the present embodiment, above-mentioned storage medium can
To be arranged to store the program code for executing following steps：
S1, more current calculated value and predetermined threshold, wherein the current calculated value is that last moment and subsequent time are felt
Contaminate the difference of host slope；
Next IP address bound-time interval is arranged according to comparison result in S2.
Optionally, in the present embodiment, above-mentioned storage medium can include but is not limited to：USB flash disk, read-only memory (ROM,
Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disc or
The various media that can store program code such as CD.
Optionally, in the present embodiment, processor executes above-mentioned steps according to stored program code in storage medium
S1、S2。
Optionally, the specific example in the present embodiment can refer to described in above-described embodiment and optional embodiment
Example, details are not described herein for the present embodiment.
Obviously, those skilled in the art should be understood that each module of the above invention or each step can be with general
Computing device realize that they can be concentrated on a single computing device, or be distributed in multiple computing devices and formed
Network on, optionally, they can be realized with the program code that computing device can perform, it is thus possible to which they are stored
It is performed by computing device in the storage device, and in some cases, it can be with different from shown in sequence execution herein
The step of going out or describing, either they are fabricated to each integrated circuit modules or by them multiple modules or
Step is fabricated to single integrated circuit module to realize.In this way, the present invention is not limited to any specific hardware and softwares to combine.
The foregoing is only a preferred embodiment of the present invention, is not intended to restrict the invention, for the skill of this field
For art personnel, the invention may be variously modified and varied.All within the spirits and principles of the present invention, any made by repair
Change, equivalent replacement, improvement etc., should all be included in the protection scope of the present invention.
Claims (10)
1. a kind of IP address jump method of software defined network SDN, which is characterized in that including：
Compare current calculated value and predetermined threshold, wherein the current calculated value is last moment and the infected master of subsequent time
The difference of machine slope；
According to comparison result, next IP address bound-time interval is set.
2. according to the method described in claim 1, it is characterized in that, described according to comparison result, setting IP address bound-time
Interval includes：
When the current calculated value is less than the predetermined threshold, according to guarantee property parameter, the property hidden parameter and current IP
Next IP address bound-time interval described in the bound-time interval calculation of location, wherein the guarantee property parameter gulps down for current network
Ratio between the amount of spitting and traditional network handling capacity, the property the hidden parameter are the successful detection times of attacker and total detection time
Ratio between number；
When the current calculated value is more than the predetermined threshold, next IP address is set in the way of exponential successively decrease
Bound-time interval.
3. according to the method described in claim 2, it is characterized in that, described parameter, the property hidden parameter and work as according to guarantee property
Next IP address bound-time interval described in preceding IP address bound-time interval calculation includes：
Respectively using guarantee property parameter, the property hidden parameter and current IP address bound-time interval, the side declined according to gradient
Formula obtains at least two bound-time intervals；
Select a time interval as between next IP address bound-time at least two bound-time interval
Every, wherein the time interval selected is time interval minimum at least two time interval.
4. according to the method described in claim 2, it is characterized in that, according to guarantee property parameter, the property hidden parameter and current
Before next IP address bound-time interval described in IP address bound-time interval calculation, further include：
The desired value of the desired value and the property the hidden parameter of the guarantee property parameter is set.
5. method according to any one of claims 1 to 4, which is characterized in that
The predetermined threshold isWherein, I (t) indicates the quantity in the infected host of t moment.
6. the IP address saltus step device of software defined network SDN a kind of, which is characterized in that including：
Comparison module, for comparing current calculated value and predetermined threshold, wherein the current calculated value is last moment and next
The difference of moment infected host slope；
Setup module, for according to comparison result, next IP address bound-time interval to be arranged.
7. device according to claim 6, which is characterized in that the setup module includes：
First setting unit is used for when the current calculated value is less than the predetermined threshold, according to guarantee property parameter, the property hidden
Next IP address bound-time interval described in parameter and current IP address bound-time interval calculation, wherein the guarantee
Ratio of the parameter between current network handling capacity and traditional network handling capacity, the property the hidden parameter are that attacker successfully visits
Survey the ratio between number and total detection times；
Second setting unit is used for when the current calculated value is more than the predetermined threshold, in the way of exponential successively decrease
Next IP address bound-time interval is set.
8. device according to claim 7, which is characterized in that first setting unit includes：
Subelement is obtained, for using guarantee property parameter, the property hidden parameter and current IP address bound-time interval, pressing respectively
The mode declined according to gradient obtains at least two bound-time intervals；
Subelement is selected, for selecting a time interval as next IP at least two bound-time interval
Address bound-time interval, wherein the time interval selected is time interval minimum at least two time interval.
9. device according to claim 7, which is characterized in that the setup module further includes：
Third setup module, by based on according to guarantee property parameter, the property hidden parameter and current IP address bound-time interval
Before calculating next IP address bound-time interval, the desired value of the guarantee property parameter and the property the hidden parameter are set
Desired value.
10. according to claim 6 to 9 any one of them device, which is characterized in that
The predetermined threshold isWherein, I (t) indicates the quantity in the infected host of t moment.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710084288.9A CN108449441A (en) | 2017-02-16 | 2017-02-16 | The IP address jump method and device of software defined network SDN |
| PCT/CN2018/076729 WO2018149406A1 (en) | 2017-02-16 | 2018-02-13 | Ip address hopping method and apparatus for software defined network (sdn) |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710084288.9A CN108449441A (en) | 2017-02-16 | 2017-02-16 | The IP address jump method and device of software defined network SDN |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN108449441A true CN108449441A (en) | 2018-08-24 |
Family
ID=63169146
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710084288.9A Withdrawn CN108449441A (en) | 2017-02-16 | 2017-02-16 | The IP address jump method and device of software defined network SDN |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN108449441A (en) |
| WO (1) | WO2018149406A1 (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113225255A (en) * | 2021-03-31 | 2021-08-06 | 福建奇点时空数字科技有限公司 | SDN random route hopping method based on trigger generation mechanism |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115996210B (en) * | 2023-03-23 | 2023-06-27 | 湖南盾神科技有限公司 | Address port hopping method of source variable mode |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20150026363A1 (en) * | 2013-07-18 | 2015-01-22 | Empire Technology Development Llc | Time based ip address hopping |
| CN105429957A (en) * | 2015-11-02 | 2016-03-23 | 芦斌 | IP address jump safety communication method based on SDN framework |
| CN106060184A (en) * | 2016-05-11 | 2016-10-26 | 中国人民解放军国防信息学院 | Three dimensional-based IP address hop pattern generation method and hop controllers |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US10574525B2 (en) * | 2015-07-02 | 2020-02-25 | Perspecta Labs Inc. | Configuration agreement protocol method |
| CN105282035B (en) * | 2015-11-09 | 2018-08-03 | 中国电子科技集团公司第三十研究所 | A kind of high safety network communication method based on IP address bounce |
-
2017
- 2017-02-16 CN CN201710084288.9A patent/CN108449441A/en not_active Withdrawn
-
2018
- 2018-02-13 WO PCT/CN2018/076729 patent/WO2018149406A1/en active Application Filing
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20150026363A1 (en) * | 2013-07-18 | 2015-01-22 | Empire Technology Development Llc | Time based ip address hopping |
| CN105429957A (en) * | 2015-11-02 | 2016-03-23 | 芦斌 | IP address jump safety communication method based on SDN framework |
| CN106060184A (en) * | 2016-05-11 | 2016-10-26 | 中国人民解放军国防信息学院 | Three dimensional-based IP address hop pattern generation method and hop controllers |
Non-Patent Citations (1)
| Title |
|---|
| CHANGTING LIN等: "Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation", 《2016 IEEE 35TH SYMPOSIUM ON RELIABLE DISTRIBUTED SYSTEMS WORKSHOPS (SRDSW)》 * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113225255A (en) * | 2021-03-31 | 2021-08-06 | 福建奇点时空数字科技有限公司 | SDN random route hopping method based on trigger generation mechanism |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2018149406A1 (en) | 2018-08-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP6952849B2 (en) | Session security partition and application profiler | |
| US10653960B2 (en) | Method for controlling interaction with virtual target, terminal, and storage medium | |
| CN106920252B (en) | Image data processing method and device and electronic equipment | |
| US20170163902A1 (en) | Method and electronic device for generating high dynamic range image | |
| CN108206959B (en) | Method and device for displaying bullet screen message | |
| CN108031120B (en) | Scene object control method and device, electronic equipment and storage medium | |
| CN108449441A (en) | The IP address jump method and device of software defined network SDN | |
| JP2023107821A (en) | Game processing program, game processing method, and game processing device | |
| CN110460650A (en) | The decision-making technique and device of unloading are calculated under multiple edge server scene | |
| CN109925712B (en) | Virtual object control system | |
| CN109646951B (en) | Game information synchronization method and device | |
| CN110124316B (en) | Method and device for processing special effects in game, electronic equipment and storage medium | |
| Silva et al. | REPEL: a strategic approach for defending 5G control plane from DDoS signalling attacks | |
| CN108875502A (en) | Face identification method and device | |
| CN107222618A (en) | Terminal screenshotss method and device | |
| US9901823B1 (en) | Battle attribute-based arrangement of map areas | |
| CN108014499B (en) | Application parameter adjusting method and device | |
| CN104702532B (en) | A kind of method for processing business and equipment | |
| CN108399266A (en) | Data pick-up method, apparatus, electronic equipment and computer readable storage medium | |
| CN115022067B (en) | Network security defense method and device under game-based asymmetric information | |
| CN110784487A (en) | SDN node defense method based on data packet sampling inspection model | |
| CN115473677A (en) | Penetration attack defense method and device based on reinforcement learning and electronic equipment | |
| CN113901464A (en) | Artificial intelligence safety architecture system and method based on service arrangement and related equipment | |
| CN108829397B (en) | System and method for downloading screening rules onto mobile device | |
| CN113783850A (en) | Network protection method, device, equipment and machine readable storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20180824 |