Research on SDN Virtual Honeynet for Network Attack Situation
LIAN Zhe
YIN Xiaochuan
TAN Ren
BIAN Yangyang
Abstract:Aimed at the problems that the existing network situation awareness cannot acquire on-demand situation information and cannot adjust the network structure according to situational threat of network attacks dynamically,a SDN-based virtual honeynet architecture is proposed on the basis of flexible traffic control principle with the combination of good scalability and manageability of OpenDaylight controller.Through constructing a SDN-based virtual honeynet,the separation between data control layer and data transmission layer is realized.Simultaneously,traffic controlling difficulty and inconvenience of deploying or dynamically adjusting physical machines are solved compared to traditional honeynets.At last,the paper utilizes Mininet platform for building SDN virtual honeynet.The experiment results show that the SDN-based virtual honeynet can achieve on-demand access to situation information and dynamic adjustment of network structure etc.,thus reducing the network attack threat.
Keywords:attack situationsoftware defined networkingvirtual honeyneton-demand acquisitiondynamic adjustment
Publication Date:2017-01-01
Online Publishing Date:2025-08-15(First online date of this platform, not the publication date of the document)
Pages:6( 79-84 )