计算机与现代化 ›› 2023, Vol. 0 ›› Issue (08): 119-126.doi: 10.3969/j.issn.1006-2475.2023.08.019

• 信息安全 • 上一篇    

软件定义天地一体化网络安全切换架构与方法

  

  1. (1.战略支援部队信息工程大学,河南 郑州 450001; 2.河南省信息安全重点实验室,河南 郑州 450001)
  • 出版日期:2023-08-30 发布日期:2023-09-13
  • 作者简介:雷依翰(1991—),男,湖北随州人,硕士研究生,研究方向:天地一体化网络安全,E-mail: lyhfjw1120@163.com; 曹利峰(1981—),男,河南禹州人,副教授,博士,研究方向:网络安全,信息安全,E-mail: caolf302@sina.com; 韩孟达(1996—),男,河北廊坊人,硕士研究生,研究方向:天地一体化网络,E-mail: mdhan@stu.xidian.edu.cn; 韩雪(1998—),女,安徽阜阳人,本科,研究方向:信息安全,E-mail: 823033193@qq.com。

Security Handover Architecture and Method for Software Defined Space-ground#br# Integration Network

  1. (1. Strategic Support Force Information Engineering University, Zhengzhou 450001, China; 2. Henan Provincial Key Laboratory of Information Security, Zhengzhou 450001, China)
  • Online:2023-08-30 Published:2023-09-13

摘要: 摘要:天地一体化网络规模庞大、结构复杂、节点暴露、动态拓扑,为确保整个系统中用户节点发生网络切换的安全性和高效性,基于软件定义网络中控制平面与转发平面分离的思想,提出一种软件定义天地一体化网络安全切换架构。本文详细阐述了该架构应用层、控制层和数据层的各个功能模块作用,以实现安全切换可管可控、准确高效、灵活可定义的目标。根据架构特点同时考虑切换预留时间和影响切换的相关属性值,提出一种基于接收信号强度预测的多属性权重优化的自适应安全切换决策算法。实验仿真结果表明,切换决策准确,可满足天地一体化网络安全切换的需求。

关键词: 关键词:天地一体化网络, 软件定义网络, 安全切换架构, 属性权重优化, 切换决策算法

Abstract: Abstract: The space-ground integrated network has the characteristics of large scale, complex structure, node exposure and dynamic topology. To ensure the security and efficiency of network handover of user nodes in the whole system, this paper proposed a new space-earth integrated network security handover architecture based on the idea of separation of control plane and forwarding plane in software-defined network. The function of each functional module of the application layer, control layer and device layer of the architecture is expounded in detail, to achieve the goal of safe handover, manageable and controllable, accurate and efficient, flexible and definable. According to the characteristics of the architecture, considering the handover reservation time and the related attribute values that affect the handover, a multi-attribute weight adaptive handover decision algorithm based on the received signal strength prediction is proposed. The experimental simulation results show that the handover decision is accurate and can meet the needs of the security handover of the space-ground integrated network.

Key words: Key words: space-ground integration network, software defined network (SDN), security handover architecture, attribute weight optimization, handover decision algorithm

中图分类号: