基于软件定义网络的实验室防火墙架构设计

Design of Laboratory Firewall Architecture Based on Software Definition Network

摘要:

针对高校网络实验室安全性较弱的问题,提出了一种基于软件定义网络的防火墙系统建设方案。该防火墙系统采用高性能软硬件系统和相结合的设计思路,以信息处理过程与数据交互过程中的安全防护为研究对象,在高校教师团队与专业技术公司的协同合作下,打造提升校园网络安全性,同时具备教学与科研功能的防火墙系统创新实验平台。在该平台上进行了实验,实验结果表明,开发的防火墙不仅可以抑制因控制器系统的引入而导致的网络攻击,而且能够成功地监控所有网络连接。

Abstract:

In order to deal with the problem of weak cyber security in high school laboratory, a software defined networking-based firewall system construction project is proposed. By combining high performance software and hardware systems, the protection for information processing and dada exchanging is investigated. With the help of cooperation between college teacher team and professional technology company, the campus network security is enhanced, and the innovation experiment platform for teaching and research is established. Simulation results on this platform verifies the proposed firewall system can not only suppress the network attack incurred by the control system, but can also monitor all network links.