The Research And Realization Of Network Security Method Based On SDN

With the popularization of mobile Internet and cloud applications,the network scale is expanding,the demand of network is increasing,and the Network attacks are also emerging.The traditional Network security method and resilience is poor,How to use the Network Function Virtualization with resilience and the Software Definition Network with flexible network control to adapt to this development becomes the research hotspot.In this paper,the research and implementation of this research hotspots are carried out,and has carried out the following works:1.With the methods of network security as the research object,the paper analyzes the current situation of network security,and studies the spoofing attacks,sniffing attack,port scanning technology and the common ways of cyber attacks such as distributed denial of service attack,studied the principle of network attack and defense as well as the traditional method of network security.2.The research on SDN technology,through the research on SDN network architecture and interface protocol,in H3 C VCF controller for implementing the SDN network,and the design of flow table OpenFlow,generation,distributed,and analysis of several aspects of research and the change of the flow chart to implement network security.3.The research on NFV technology,based on the research of the architecture of NFV,for implementing the NFV in cloud environment,and designs the virtualization of network intrusion detection system to detect network attack,the firewall technology was also designed virtualization to defense network attacks.4.Through the study of SDN and NFV,design the SDN and NFV fusion architecture to enhance the network security.In this method is used in network intrusion detection system for network attack detection,studied the TCP three-way handshake mechanism and signal jump technology consultation mechanism and design the port and port jump algorithm,studies the IP spoofing attack and network defense by dynamic update flow sheet.It is verified by experiments that NFV technology and SDN technology can well adapt to the development of network.The network security method based on SDN can effectively detect and defend network security,and has good security and anti deception.This method is especially suitable for secure communication in heterogeneous networks.