论文标题
改进软件定义的认知和安全网络
Improving Software Defined Cognitive and Secure Networking
论文作者
论文摘要
传统通信网络由大量供应商特定的手动配置设备组成,这些设备由特定的控制逻辑或算法固定。最终的网络包括本质上复杂,难以集成和运行的分布式控制平面体系结构,并且在资源使用方面效率最低。但是,数据流量的迅速增加需要综合使用各种访问技术和效率提高的自主网络操作。因此,提出了软件定义的网络(SDN)的概念,该概念将网络控制平面与数据转向平面分离。 SDN控制平面可以集成一组不同的设备,并在运行时通过供应商 - 无障碍可编程应用程序编程接口(API)对其进行调整。本文提出了软件定义的认知网络,以实现网络资源的智能使用。包括认知无线电在内的不同无线电访问技术是通过共同的控制平台集成的,以提高整体网络性能。软件定义的认知网络的架构框架与实验性能评估一起介绍。由于SDN使应用程序能够更改网络行为并集中网络控制平面以监督整个网络,因此研究SDN的安全性非常重要。因此,本论文在SDN中发现了潜在的安全漏洞,研究为这些漏洞提出的安全平台和体系结构,并为未解决的安全漏洞提供了未来的方向。此外,本文还研究了5G启用技术的潜在安全挑战及其解决方案,例如SDN,云技术和虚拟网络功能,并为提高5G网络的安全性提供了关键的见解。
Traditional communication networks consist of large sets of vendor-specific manually configurable devices which are hardwired with specific control logic or algorithms. The resulting networks comprise distributed control plane architectures that are complex in nature, difficult to integrate and operate, and are least efficient in terms of resource usage. However, the rapid increase in data traffic requires an integrated use of diverse access technologies and autonomic network operations with increased efficiency. Therefore, the concepts of Software Defined Networking (SDN) are proposed that decouple the network control plane from the data-forwarding plane. The SDN control plane can integrate a diverse set of devices, and tune them at run-time through vendor-agnostic programmable Application Programming Interfaces (APIs). This thesis proposes software defined cognitive networking to enable intelligent use of network resources. Different radio access technologies, including cognitive radios, are integrated through a common control platform to increase the overall network performance. The architectural framework of software defined cognitive networking is presented alongside the experimental performance evaluation. Since SDN enables applications to change the network behavior and centralizes the network control plane to oversee the whole network, it is highly important to investigate security of SDNs. Therefore, this thesis finds potential security vulnerabilities in SDN, studies proposed security platforms and architectures for those vulnerabilities, and presents future directions for unresolved security vulnerabilities. Furthermore, this thesis also investigates the potential security challenges and their solutions for the enabling technologies of 5G, such as SDN, cloud technologies, and virtual network functions, and provides key insights into increasing the security of 5G networks.