SDN之單向可靠檔案傳送技術設計

Design of reliable one-way file transfer technique in software defined network

陳重瑜(Chung-yu Chen)

指導教授 ： 吳曉光

國立中央大學/資訊電機學院/資訊工程學系/碩士(2014年)

摘要

近年來，網際網路的發展越來越普及，同時也成為我們日常生活中的一部分，如今，在已開發國家中的網際網路普及率也已經高達77%，隨之而來的是大量資訊的數位化，包含檔案、文件、電視節目等等都為了在網路傳送而數位化，雖然這為我們的生活帶來很多益處，但同時也產生出許多的安全問題，由於大多數的數位資料都是儲存在數據中心或是伺服器中，因此如何預防這些資料不外洩或被竊取變成為一個重要的議題，尤其是在一些大公司或大型組織中，一些惡意員工甚至能夠直接透過內部網路而竊取公司的機密文件及財產。因此在這篇論文中我們提出了利用軟體定義網路(SDN)來達到單向可靠的檔案傳輸系統，透過SDN來設置單向網路不但能有效的保護檔案不被竊取或洩漏，同時在靈活性擴充性及管理上都有許多優異的特性，除此之外，我們也深入研究分析目前常用之錯誤更正演算法，透過適當的使用我們也保證了單向檔案傳輸的正確性及完整性。

關鍵字

單向網路 ； 正向錯誤更正碼 ； 軟體定義網路 ； 數位噴泉碼

並列摘要

Recently, internet is becoming more and more prevalent in our daily life. Nowadays, the penetration rate of internet access approaches 77% in the developed countries. Consequently, lots of information, including files, documents, etc., is digitized for the transmission over Internet. Although it brings numerous benefits, it introduces additional security threats due to the networking. Most of digital files are always stored in either the server or the data center. It becomes one of the critical issues in preventing these kinds of file being stolen or leaked, especially in the large companies or the organizations because their employees could directly access those servers and internet as well. In this paper we propose unidirectional reliable file delivery system using software defined network (SDN). In the proposed system, we protect the information from being leaked by using the programmable property of SDN. As SDN is software manageable, it is easy to deploy and manage in practical environment. Additionally we also guarantee the reliable file delivery through the unidirectional access with error correction scheme. The detail of the system architecture, scheme, and the testing results in real environment are described in this paper with discussions.

參考文獻

[1] W. Jason., "Unidirectional Networking," GIAC Security Essential Certification Practical Assignment Version 1Ab,(c) SANS Institute , 2003.

[4] "M.H. Kang, I. Moskowitz, and S.Chincheck. “The pump: A Decade of Covert Fun”, Proceedings of 21st Annual Computer Security Applications Conference, pp 352-360, December 2005 .".

[11] "“Application Layer Forward Error Correction for Mobile Multimedia Broadcasting,” Digital Fountain, Inc., 2008.".

[15] "S. Sezer, S. Scott-Hayward, P. K. Chouhan, B. Fraser, D. Lake, J. Finnegan, and N. Rao, “Are we ready for SDN? Implementation challenges for software-defined networks,” Communications Magazine, IEEE 51.7, 2013.".

[2] T. Stockhammer, A. Shokrollahi, M. Watson, M. Luby, T. Gasiba, B. Furht,and S. Ahson, "Application layer forward error correction for mobile multimedia broadcasting," Handbook of mobile broadcasting: DVB-H, DMB, ISDB-T and media flo, pp. pp. 239-280, 2008.