A Cyber Attack Situation Evaluating Method Based on Multi-Dimensional Features Analysis in SDNs

Zhijie Fan ； Qian Xu ； Wenye Zhu ； Chengxiang Tan

《電腦學刊》 30卷5期 (2019/10) Pp. 185-204

https://doi.org/10.3966/199115992019103005014

摘要

Software Defined Network (SDN) is a programmable network that separates the network data plane from the control plane. However, lots of security threats and issues are concerned in software defined network. In this work, in order to reasonably complete the cyber attack situation evaluation in the SDNs, we proposed a cyber attack situation evaluating method based on multi-dimensional features analysis in SDNs. We systematically considered cyber attack detection features and improved their computation methods about four typical cyber attacks in SDN. And furthermore, we emphatically considered the interrelations and restrictive correlations between any two different cyber attack features using Fuzzy Cognitive Maps (FCM). Then we completed the quantization method of cyber attack situation evaluation in the SDN simulation environment. Finally, we used Mininet to establish our experiment environment, in which we simulated four typical cyber attacks to verify and analyze our method in the experiment. The experimental result shows that our proposed method can accurately reflect the cyber attack situation in SDN environment.

關鍵字

attack detection ； attack situation ； cyber attack ； cyber security ； fuzzy cognitive maps ； software defined network