考虑拜占庭属性的SDN安全控制器多目标优化部署方案

doi:10.11959/j.issn.2096-109x.2021060

网络与信息安全学报 ›› 2021, Vol. 7 ›› Issue (3): 72-84.doi: 10.11959/j.issn.2096-109x.2021060

• 专栏Ⅱ：SDN与云计算安全 • 上一篇下一篇

考虑拜占庭属性的SDN安全控制器多目标优化部署方案

王涛, 陈鸿昶

信息工程大学，河南郑州 450001

修回日期:2021-03-01 出版日期:2021-06-15 发布日期:2021-06-01
作者简介:王涛（1993- ），男，山东临朐人，信息工程大学博士生，主要研究方向为SDN安全
陈鸿昶（1964- ），男，河南新密人，信息工程大学教授、博士生导师，主要研究方向为未来网络体系结构、人工智能
基金资助:
国家重点研发计划(2018YFB0804004);国家自然科学基金(62072467);国家自然科学基金(61521003)

Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes

Tao WANG, Hongchang CHEN

Information Engineering University, Zhengzhou 450001, China

Revised:2021-03-01 Online:2021-06-15 Published:2021-06-01
Supported by:
The National Key R＆D Program of China(2018YFB0804004);The National Natural Science Foundation of China(62072467);The National Natural Science Foundation of China(61521003)

摘要/Abstract

摘要：

通过赋予软件定义网络分布式控制平面拜占庭属性可以有效提高其安全性。在实现拜占庭属性过程中，控制器部署的数量、位置，以及交换机与控制器之间的连接关系会直接影响全局网络关键性能指标。为此，提出了一种考虑拜占庭属性的 SDN 安全控制器多目标优化部署方案。首先，构建了综合考量交互时延、同步时延、负载差异程度和控制器部署数量等优化指标的拜占庭控制器部署问题（MOSBCPP）模型；然后，针对该模型个性化设计了包括控制器部署策略初始化函数、变异函数，快速非支配排序函数及精英策略选择函数等在内的NASG-II求解算法。相关仿真结果表明，该部署方案能够在有效降低交互时延、同步时延、负载差异程度和控制器部署数量等性能指标的同时提高控制平面安全性。

关键词: 软件定义网络安全, 分布式控制平面, 拜占庭属性, 控制器部署, 多目标优化

Abstract:

By giving the software defined network distributed control plane Byzantine attributes, its security can be effectively improved.In the process of realizing Byzantine attributes, the number and location of controllers, and the connection relationship between switches and controllers can directly affect the key network performance.Therefore, a controller multi-objective optimization placement strategy for SDN security controllers considering Byzantine attributes was proposed.Firstly, a Byzantine controller placement problem (MOSBCPP) model that comprehensively considered interaction delay, synchronization delay, load difference and the number of controllers was constructed.Then, a solution algorithm based on NASG-II was designed for this model, which included the initialization function, the mutation function, the fast non-dominated sorting function and the elite strategy selection function.Simulation results show that this strategy can effectively reduce interaction delay, synchronization delay, load difference and the number of controllers, while improving control plane security.

Key words: software defined network security, distributed control plane, Byzantine attributes, controller placement, multi-objective optimization

中图分类号:

TP393

王涛, 陈鸿昶. 考虑拜占庭属性的SDN安全控制器多目标优化部署方案[J]. 网络与信息安全学报, 2021, 7(3): 72-84.

Tao WANG, Hongchang CHEN. Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes[J]. Chinese Journal of Network and Information Security, 2021, 7(3): 72-84.

图/表 7

图1

表1

图2

图3

图4

图5

图6

参考文献 20

[1]	MCKEOWN N , ANDERSON T , BALAKRISHNAN H ,et al. OpenFlow:enabling innovation in campus networks[J]. ACM Sigcomm Computer Communication Review, 2008,38(2): 69-74.
[2]	TOOTOONCHIAN A , GANJALI Y . HyperFlow:a distributed control plane for OpenFlow[C]// Internet Network Management Conference on Research on Enterprise Networking. 2011.
[3]	CHICA J , IMBACHI J , BOTERO J . Security in SDN:a comprehensive survey[J]. Journal of Network and Computer Applications, 2020,159: 102595
[4]	KRIAA S , PAPILLON S , JAGADEESAN L ,et al. Better safe than sorry:modeling reliability and security in replicated SDN controllers[C]// 2020 16th International Conference on the Design of Reliable Communication Networks (DRCN). 2020.
[5]	HELLER B , SHERWOOD R , MCKEOWN N . The controller placement problem[J]. ACM Sigcomm Computer Communication Review, 2012,42(4): 473-478.
[6]	SALLAHI A , ST-HILAIRE M . Optimal model for the controller placement problem in software defined networks[J]. IEEE Communications Letters, 2015,19(1): 30-33.
[7]	YAO G , BI J , LI Y ,et al. On the capacitated controller placement problem in software defined networks[J]. IEEE Communications Letters, 2014,18(8): 1339-1342.
[8]	HU Y , LUO T , WANG W ,et al. On the load balanced controller placement problem in software defined networks[C]// 2016 2nd IEEE International Conference on Computer and Communications (ICCC). 2016.
[9]	BALA P . Capacitated next controller placement in software defined networks[J]. IEEE Transactions on Network and Service Management, 2017,14(3): 514-527.
[10]	ISHIGAKI G , SHINOMIYA N . Controller placement algorithm to alleviate burdens on communication nodes[C]// International Conference on Computing. 2016.
[11]	HU Y , WANG W , GONG X ,et al. On reliability-optimized controller placement for software-defined networks[J]. China Communications, 2014,11(2): 38-54.
[12]	吴奇, 陈鸿昶 . 低故障恢复开销的软件定义网络控制器布局算法[J]. 网络与信息安全学报, 2020,6(6): 97-104.
	WU Q , CHEN H C . Low fault recovery cost controller placement strategy in software-defined networks[J]. Chinese Journal of Network and Information Security, 2020,6(6): 97-104.
[13]	WANG G , ZHAO Y , HUANG J ,et al. An effective approach to controller placement in software defined wide area networks[J]. IEEE Transactions on Net-work and Service Management, 2018,15(1): 344-355.
[14]	史久根, 谢熠君, 孙立 ,等. 软件定义网络中面向时延和负载的多控制器放置策略[J]. 电子与信息学报, 2019,41(8): 1869-1876.
	SHI J G , XIE Y J , SUN L ,et al. Multi-controller placement strategy based on latency and load in software defined network[J]. Journal of Electronics ＆ Information Technology, 2019,41(8): 1869-1876.
[15]	LIAO J , SUN H . Density cluster based approach for controller placement problem in large-scale software defined networkings[J]. Computer Networks, 2017,112(1): 24-35.
[16]	ZHANG Y , BEHESHTI N , TATIPAMULA M . On resilience of split-architecture networks[C]// 2011 IEEE Global Telecommunications Conference-GLOBECOM 2011. 2012.
[17]	ZHAO J , QU H , ZHAO J ,et al. Towards controller placement problem for software-defined network using affinity propagation[J]. Electronics Letters, 2017,53(14): 928-929.
[18]	史久根, 邾伟, 贾坤荧 ,等. 软件定义网络中基于负载均衡的多控制器部署算法[J]. 电子与信息学报, 2018,40(2): 455-461.
	SHI J G , ZHU W , JIA K Y ,et al. Multi-controller deployment algorithm based on load balance in software defined network[J]. Journal of Electronics ＆ Information Technology, 2018,40(2): 455-461.
[19]	吴奇, 陈鸿昶 . 软件定义网络容错控制平面的最小覆盖布局方法[J]. 电子与信息学报, 2020,42(12): 2849-2856.
	WU Q , CHEN H C . Minimal coverage model for fault-tolerant controller placement in software-defined networks[J]. Journal of Electronics ＆ Information Technology, 2020,42(12): 2849-2856.
[20]	XIE J , GUO D , ZHU X ,et al. Minimal fault-tolerant coverage of controllers in IaaS datacenters[J]. IEEE Transactions on Services Computing, 2020,13(6): 1128-1141.

部署策略	控制器位置	管理的交换机	控制路径	控制时延	负载	时延合计	负载差异
(1,1,0)	A	A	A→A	0	l	t₂	2l
	B	B,C	B→B,C→B	0,t₂	3l
(1,0,1)	A	A,B	A→A,B→A	0,t₁	2l	t₁	0
	C	C	C→C	0	2l

考虑拜占庭属性的SDN安全控制器多目标优化部署方案

Multi-objective optimization placement strategy for SDN security controller considering Byzantine attributes

在线阅读

pdf下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 7

参考文献 20

相关文章 3

Metrics

推荐阅读 0

[1]	陈佩, 李凤华, 李子孚, 郭云川, 成林. 基于规则关联的安全数据采集策略生成[J]. 网络与信息安全学报, 2021, 7(5): 132-148.
[2]	吴奇,陈鸿昶. 低故障恢复开销的软件定义网络控制器布局算法[J]. 网络与信息安全学报, 2020, 6(6): 97-104.
[3]	郭中孚, 张兴明, 赵博, 王苏南. 软件定义网络数据平面安全综述[J]. 网络与信息安全学报, 2018, 4(11): 1-12.