软件定义网络(Softeware Defined Network, SDN)是一种新型的网络体系架构,目前已成为下一代互联网研究的热点。为了解决SDN中的网络信息安全问题,文章对SDN中的控制平面、数据平面和应用平面进行分析,梳理并总结了SDN管理中的相关网络...软件定义网络(Softeware Defined Network, SDN)是一种新型的网络体系架构,目前已成为下一代互联网研究的热点。为了解决SDN中的网络信息安全问题,文章对SDN中的控制平面、数据平面和应用平面进行分析,梳理并总结了SDN管理中的相关网络安全问题。提出了一种基于SDN的网络安全框架及安全策略,有效弥补传统网络结构中的网络安全缺陷问题,增强SDN网络安全级别,并建立一种基于终端用户限定与管理的SDN的网络安全框架及其安全策略。展开更多
In order to relvedy the security weaknesses of a robust user authentication framework for wireless sensor networks, an enhanced user authentication framework is presented. The enhanced scheme requires proof of the pos...In order to relvedy the security weaknesses of a robust user authentication framework for wireless sensor networks, an enhanced user authentication framework is presented. The enhanced scheme requires proof of the possession of both a password and a snort card, and provides more security guarantees in two aspects： 1） it addresses the untmceability property so that any third party accessing the communication channel cannot link two authentication sessions originated from the same user, and 2） the use of a smart card prevents offiine attacks to guess passwords. The security and efficiency analyses indicate that our enhanced scheme provides the highest level of security at reasonable computational costs. Therefore, it is a practical authentication scheme with attractive security features for wireless sensor networks.展开更多
文摘软件定义网络(Softeware Defined Network, SDN)是一种新型的网络体系架构,目前已成为下一代互联网研究的热点。为了解决SDN中的网络信息安全问题,文章对SDN中的控制平面、数据平面和应用平面进行分析,梳理并总结了SDN管理中的相关网络安全问题。提出了一种基于SDN的网络安全框架及安全策略,有效弥补传统网络结构中的网络安全缺陷问题,增强SDN网络安全级别,并建立一种基于终端用户限定与管理的SDN的网络安全框架及其安全策略。
基金This work was supported by the Program for Changjiang Scholars and Innovative Research Team in University under Grant No. IRT1078 the Key Program of NSFC-Guangdong Union Foundation under Grant No.U1135002+3 种基金 the Major National S＆T Program under Grant No.2011ZX03005-002 the National Natural Science Foundation of China under Grants No. 61072066, No.61173135, No.61100230, No.61100233, No.61202389, No.61202390 the Natural Science Basic Research Plan in Shaanxi Province of China under Grants No.2012JQ8043, No. 2012JM8030, No. 2012JM8025, No2011JQ8003 the Fundamental Research Funds for the Central Universities under Cxants No. JY10000903001, No. K50511030004. The authors would like to thank the anonymous reviewers and the editor for their constructive comments that have helped us to improve this paper.
文摘In order to relvedy the security weaknesses of a robust user authentication framework for wireless sensor networks, an enhanced user authentication framework is presented. The enhanced scheme requires proof of the possession of both a password and a snort card, and provides more security guarantees in two aspects： 1） it addresses the untmceability property so that any third party accessing the communication channel cannot link two authentication sessions originated from the same user, and 2） the use of a smart card prevents offiine attacks to guess passwords. The security and efficiency analyses indicate that our enhanced scheme provides the highest level of security at reasonable computational costs. Therefore, it is a practical authentication scheme with attractive security features for wireless sensor networks.
