软件定义网络用户动态访问控制模型仿真
|
摘要
对软件定义网络(SDN)用户动态访问控制进行模型构建,能够提高用户的用网安全性,对用户动态访问控制模型进行仿真,需要利用信任角色构建动态控制模型,并对软件定义网络节点进行信任度计算,而传统方法通过并行指令序列学习获取用户行为轮廓,利用前向轮廓建立全局K模型,但忽略了计算网络节点的信任度,导致控制速度慢。为此提出了一种基于角色信任的软件定义网络用户动态访问控制模型,分析软件定义网络访问的基本信任机制,并在此基础上依据网络基本要素与网络权限层级。构建控制软件定义网络用户访问的动态流程,计算软件定义网络节点信任度,通过信任角色完成对软件定义网络用户动态访问控制模型的构建。仿真结果表明,与传统RBAC模型相比,所提动态模型的访问控制响应速度更快、准确率更高,在用户识别方面更具灵活性。
Traditionally,the method uses the forward contour to build global K model,but the trust degree of computing network node is ignored. Therefore,a model to control user dynamic access in software-defined network based on role trust was proposed. First of all,the basic trust mechanism of software defined network access was analyzed. Based on the basic elements of network and the level of network right,the dynamic process of user access was constructed and the trust degree of node in software-defined network was calculated. Finally,the role trust was used to build the user dynamic access control model of software-defined network. Simulation results show that,compared with traditional RBAC model,the proposed dynamic model has faster access control response and higher accuracy,which is more flexible in user recognition.
Traditionally,the method uses the forward contour to build global K model,but the trust degree of computing network node is ignored. Therefore,a model to control user dynamic access in software-defined network based on role trust was proposed. First of all,the basic trust mechanism of software defined network access was analyzed. Based on the basic elements of network and the level of network right,the dynamic process of user access was constructed and the trust degree of node in software-defined network was calculated. Finally,the role trust was used to build the user dynamic access control model of software-defined network. Simulation results show that,compared with traditional RBAC model,the proposed dynamic model has faster access control response and higher accuracy,which is more flexible in user recognition.
引文
[1]孙彦斌,张宇,张宏莉.信息中心网络体系结构研究综述[J].电子学报,2016,44(8):2009-2017.
[2]吴建平,等. ADN:地址驱动的网络体系结构[J].计算机学报,2016,39(6):1081-1091.
[3]张朝昆,等.软件定义网络(SDN)研究进展[J].软件学报,2015,26(1):62-81.
[4]曾珊,陈刚,齐法制.软件定义网络性能研究[J].计算机科学,2015,42(s1):243-248.
[5]赵书田,刘海姣.基于Java Script的动态Web应用系统设计[J].现代电子技术,2017,40(15):44-46.
[6]魏佳欣,叶飞跃.基于HTML特征与层次聚类的Web查询接口发现[J].计算机工程,2016,42(2):56-61.
[7]胡晓燕.云计算存储数据动态访问控制方法研究与仿真[J].计算机仿真,2017,34(3):365-368.
[8]任磊,等.面向信息可视化的语义Focus+Context人机交互技术[J].计算机学报,2015,38(12):2488-2498.
[9]郑高山,应时,吴睿.基于语义技术的软件用户访问控制方法[J].计算机科学,2016,43(8):131-136.
[10]杨宏宇,孟令现. Hadoop云平台用户动态访问控制模型[J].通信学报,2017,38(9):9-17.
[2]吴建平,等. ADN:地址驱动的网络体系结构[J].计算机学报,2016,39(6):1081-1091.
[3]张朝昆,等.软件定义网络(SDN)研究进展[J].软件学报,2015,26(1):62-81.
[4]曾珊,陈刚,齐法制.软件定义网络性能研究[J].计算机科学,2015,42(s1):243-248.
[5]赵书田,刘海姣.基于Java Script的动态Web应用系统设计[J].现代电子技术,2017,40(15):44-46.
[6]魏佳欣,叶飞跃.基于HTML特征与层次聚类的Web查询接口发现[J].计算机工程,2016,42(2):56-61.
[7]胡晓燕.云计算存储数据动态访问控制方法研究与仿真[J].计算机仿真,2017,34(3):365-368.
[8]任磊,等.面向信息可视化的语义Focus+Context人机交互技术[J].计算机学报,2015,38(12):2488-2498.
[9]郑高山,应时,吴睿.基于语义技术的软件用户访问控制方法[J].计算机科学,2016,43(8):131-136.
[10]杨宏宇,孟令现. Hadoop云平台用户动态访问控制模型[J].通信学报,2017,38(9):9-17.