CAJ | 학술논문

针对传统测评方法依赖模拟环境来仿真真实网络流量的现状，提出一种基于 OpenFlow 的入侵检测评估系统。该系统基于软件定义网络技术(OpenFlow)的入侵检测评估模型，随后对该模型的框架、设置方法、具体工作过程等进行详细阐述，设计了基于该模型的测评系统，该系统利用OpenFlow灵活的网络控制能力为IDS测评搭建真实可控的网络环境，提供入侵检测所需的真实网络流量和攻击数据。最后利用该测评系统对该模型进行试验仿真，实验结果表明传统方法相比，本文提出的基于OpenFlow的入侵检测评估模型在测评效果和准确性上有较好的性能。
침대전통측평방법의뢰모의배경래방진진실망락류량적현상，제출일충기우 OpenFlow 적입침검측평고계통。해계통기우연건정의망락기술(OpenFlow)적입침검측평고모형，수후대해모형적광가、설치방법、구체공작과정등진행상세천술，설계료기우해모형적측평계통，해계통이용OpenFlow령활적망락공제능력위IDS측평탑건진실가공적망락배경，제공입침검측소수적진실망락류량화공격수거。최후이용해측평계통대해모형진행시험방진，실험결과표명전통방법상비，본문제출적기우OpenFlow적입침검측평고모형재측평효과화준학성상유교호적성능。
The traditional evaluation methods rely on simulation environment to simulate real network traffic status quo, the proposed intrusion detection system is based on OpenFlow’s assessment. The system is software-defined networking technology (OpenFlow) evaluation model based on the intrusion detection.We discussed the framework, setting methods, and specific work of this model in details. Our work designed an evaluation system based on this model, which uses a flexible network OpenFlow control structures for the evaluation of the true IDS controlled network environment, and provides the necessary intrusion detection and attack the real network traffic data. Finally, the evaluation system was used to test the simulation model. The experimental results show that compared to the traditional methods, the proposed OpenFlow intrusion detection model based on the evaluation can assess the effectiveness and accuracy of better performance.