The Design and Research for Network Address Space Randomization in OpenFlow Network

• 作者: Wei Liu Yuanbo Guo Ziyu Zhao
• 来源期刊: 电脑和通信(英文)
• 学科: 工学
• 关键词: IP CONVERSION OpenFlow MOVING TARGET DEFENSE Floodlight Hitlist WORMS
• 年，卷（期）: 2015,（5）
• 页码范围: 203-211
• 页数: 9页
• 分类号: TP39

摘要

By allocating IP address and changing IP address in source and destination hosts, network address space randomization is committed to construct a dynamic and heterogeneous network to decrease the attacking possibility and predictability. The research mainly deploys the features of OpenFlow network including data plane and control plane decoupling, centralized control of the network and dynamic updating of forwarding rules, combines the advantages of the network address space randomization technology with the features of the OpenFlow network, and designs a novel resolution towards IP conversion in Floodlight controller. The research can help improve the unpredictability and decrease the possibility of worm attacking and IP sniffing by IP allocation.