A Dynamic Access Control Method for SDN

• 作者: Dexian Chang Tingting Wang Wanzhong Sun Yingjie Yang
• 来源期刊: 电脑和通信(英文)
• 学科: 工学
• 关键词: ACCESS CONTROL SECURITY SDN ABAC DYNAMIC
• 年，卷（期）: 2019,（10）
• 页码范围: 105-115
• 页数: 11页
• 分类号: TP3

摘要

Aiming at the problem that network topology changes frequently in SDN (Software Defined Network) environment and it is difficult to implement fine-grained access control, utilizing the characteristics of SDN transfer control separation and software programming, the ABAC model (Attribute-Based Access Control) is extended by introducing security level, and the security level is defined for the attributes of subject and object to establish the access mapping relationship based on mandatory access rules. At the same time, with secure access path as SDN access control attribute, a dynamic generation method of access control path based on PSO (Particle Swarm Optimization) algorithm is designed to ensure the security of access data flow. The prototype system experiments show that the proposed method takes into account the fine-grained and dynamic requirements of SDN access control, and improves the access security of SDN while ensuring the access efficiency.