关键词: SDN控制平面内生安全, 未知漏洞, 劫持攻击, 冗余集构建, 多维异构特征, 反馈感知调度

Abstract: In order to make up for the gap of the existing research in the defense of unknown SDN (Software-Defined Networking) vulnerabilities,this paper proposes an SDN endogenous security control plane based on multi-dimensional heterogeneous features and feedback-aware scheduling strategy.This scheme effectively increases the spatiotemporal uncertainty of the execution body in the SDN control plane (reversing the asymmetry between attack and defense) by combining a redundant set construction strategy,a multi-dimensional heterogeneous element coloring strategy,and a dynamic feedback-aware scheduling strategy.The related simulation results show that the scheme can converge the number of executive bodies,increase the multi-dimensional heterogeneity index and reduce the global failure rate of the system.

Key words: SDN control plane endogenous security, unknown vulnerabilities, hijacking attack, redundant set construction, multi-dimensional heterogeneous features, feedback-aware scheduling