摘要
天地一体化网络规模庞大、结构复杂、节点暴露、动态拓扑,为确保整个系统中用户节点发生网络切换的安全性和高效性,基于软件定义网络中控制平面与转发平面分离的思想,提出一种软件定义天地一体化网络安全切换架构。本文详细阐述了该架构应用层、控制层和数据层的各个功能模块作用,以实现安全切换可管可控、准确高效、灵活可定义的目标。根据架构特点同时考虑切换预留时间和影响切换的相关属性值,提出一种基于接收信号强度预测的多属性权重优化的自适应安全切换决策算法。实验仿真结果表明,切换决策准确,可满足天地一体化网络安全切换的需求。
The space-ground integrated network has the characteristics of large scale,complex structure,node exposure and dy⁃namic topology.To ensure the security and efficiency of network handover of user nodes in the whole system,this paper proposed a new space-earth integrated network security handover architecture based on the idea of separation of control plane and forward⁃ing plane in software-defined network.The function of each functional module of the application layer,control layer and device layer of the architecture is expounded in detail,to achieve the goal of safe handover,manageable and controllable,accurate and efficient,flexible and definable.According to the characteristics of the architecture,considering the handover reservation time and the related attribute values that affect the handover,a multi-attribute weight adaptive handover decision algorithm based on the received signal strength prediction is proposed.The experimental simulation results show that the handover decision is accu⁃rate and can meet the needs of the security handover of the space-ground integrated network.
作者
雷依翰
曹利峰
韩孟达
韩雪
LEI Yi-han;CAO Li-feng;HAN Meng-da;HAN Xue(Strategic Support Force Information Engineering University,Zhengzhou 450001,China;Henan Provincial Key Laboratory of Information Security,Zhengzhou 450001,China)
出处
《计算机与现代化》
2023年第8期119-126,共8页
Computer and Modernization
关键词
天地一体化网络
软件定义网络
安全切换架构
属性权重优化
切换决策算法
space-ground integration network
software defined network(SDN)
security handover architecture
attribute weight optimization
handover decision algorithm
作者简介
雷依翰(1991-),男,湖北随州人,硕士研究生,研究方向:天地一体化网络安全,E-mail:lyhfjw1120@163.com;曹利峰(1981-),男,河南禹州人,副教授,博士,研究方向:网络安全,信息安全,E-mail:caolf302@sina.com;韩孟达(1996-),男,河北廊坊人,硕士研究生,研究方向:天地一体化网络,E-mail:mdhan@stu.xidian.edu.cn;韩雪(1998-),女,安徽阜阳人,本科,研究方向:信息安全,E-mail:823033193@qq.com。
