A Method of Detecting Hidden Ports Based on SDN

LIU Yu-ming; WANG Yong; FENG Hao

Chinese

您当前的位置：

首页 >

文章列表页 >

A Method of Detecting Hidden Ports Based on SDN

更新时间：2026-09-04

- A Method of Detecting Hidden Ports Based on SDN
- Vol. 34, Issue 10, Pages: 135-140(2017)
- 作者机构：
  
  1. 桂林电子科技大学机构计算机与信息安全学院,广西,桂林,541004
  2. 桂林电子科技大学广西云计算与复杂系统高校重点实验室,广西,桂林,541004
- 作者简介：
- 基金信息：
- DOI：
  CLC：
- Published：2017
- 稿件说明：
移动端阅览
刘玉明, 王勇, 俸皓. 基于SDN的一种隐藏端口检测方法[J]. 微电子学与计算机, 2017, 34(10): 135-140.

LIU Yu-ming, WANG Yong, FENG Hao. A Method of Detecting Hidden Ports Based on SDN[J]. 2017, 34(10): 135-140.
刘玉明, 王勇, 俸皓. 基于SDN的一种隐藏端口检测方法[J]. 微电子学与计算机, 2017, 34(10): 135-140. DOI：

LIU Yu-ming, WANG Yong, FENG Hao. A Method of Detecting Hidden Ports Based on SDN[J]. 2017, 34(10): 135-140. DOI：

摘要

考虑基于SDN架构的网络环境

并针对当前检测隐藏端口的方法的不足

提出一种全新的基于SDN架构的隐藏端口检测方法.利用SDN集中控制的特性

通过内存映射流表项的方法来实时提取主机的连接信息

并结合主机代理的信息进行交叉视图检测

同时在检测过程中引入检测状态机

使得准确检测出部署环境下所有主机的隐藏端口.实验结果表明

该方法能高效地检测主机恶意程序隐藏的端口

并具有良好的兼容性和系统性能.

Abstract

This paper proposes a method of hidden-ports detection based on SDN

with the characteristics of controlling the whole network

the controller could retrieve all the sessions information

combined with the customized data received from proxy

the controller could find all the sessions from hidden-ports based on the cross-view of full information and visible information. As the experiment shows

this method could detect all the hidden-ports effectively and compatibly.

关键词

Keywords

references

Jian-Fang L I, Zhang S D. Research on advanced persistent threat attack techniques[J]. Journal of Communication University of China, 2016.

Farhady H, Lee H Y, Nakao A. Software-defined networking: A survey[J]. Computer Networks, 2015, 81(C): 79-95. DOI: 79

Zander S, Armitage G, Branch P. Covert channels and countermeasures in computer network protocols[J]. IEEE Communications Magazine, 2007, 45(3): 44-57. DOI: 44

李博, 沃天宇, 胡春明, 等. 基于VMM的操作系统隐藏对象关联检测技术[J]. 软件学报, 2013, 24(2): 405-420. DOI: 405

崔竞松, 郭迟, 陈龙, 等. 创建软件定义网络中的进程级纵深防御体系结构[J]. 软件学报, 2014(10): 2251-2265. DOI: 2251

王蒙蒙, 刘建伟, 陈杰, 等. 软件定义网络: 安全模型、机制及研究进展[J]. 软件学报, 2016, 27(4): 969-992. DOI: 969

彭国军, 王泰格, 邵玉如, 等. 基于网络流量特征的未知木马检测技术及其实现[J]. 信息网络安全, 2012, 12(10): 5-9. DOI: 5

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

The SDN Fault Detection Algorithm Research Based on Multi-Controller

Research on assembly action recognition based on MSS-YOLO-MPHands fusion architecture

Simulation on the DC characteristics of double heterojunction p-GaN HEMT with AlN/GaN hybrid buffer layer

A review of large model development: technological evolution from BERT to Deepseek

Monte carlo analysis of V-layout trench SiC neutron detector

Related Author

FAN Zi-fu

YANG Xian-hui

YAO Jie

Related Institution

College of Communication and Information Technology, Chongqing University of Posts and Telecommunications

AI问答

Postal code：100079
Tel：（010）53879206 Email：tmw@bjxintong.com.cn
Technical support is provided by Beijing Founder electronics co., LTD 京ICP备09082226号-64 京公网安备11010602201714号
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰