Research And Implementation Of SDEN Security Service Model

Network security service is one of the core issues of future network research.Different from general network services,security services are a kind of more complex multi-dimensional services that span multiple network layers.Constrained by traditional network architecture and service models,their customizability and extensibility have not been well resolved.Extensible network service model(ENSM)and service dynamic extended network(SDEN),which aim to solve the extensibility of service,realize a unified service provision model by decoupling the control logic of traditional network services and the business logic of protocol functional units,this mechanism provides a good foundation for the customization and extension of multi-dimensional services.Based on SDEN infrastructure,a security service model and its reference implementation is proposed to improve SDEN's security service capabilities based on how to build an extensible and customizable network security service.First,based on the in-depth analysis of the multi-dimensional characteristics of the security services,a security service conceptual model based on the three-dimensional characteristics of security functions,security methods,and key algorithms is proposed,and combined with the relevant principles of SDEN,it is mapped to SDEN,the description method and construction model of security sub-services are proposed,and the state machine method and state diagram representation of security sub-services combining to form security service instances are given,the SDEN security services model are constructed on this basis.Then a reference implementation of the security service model is given,and its description documents specification and key data structures are discussed in detail,as well as the specific implementation of SDEN default security service instance.Finally,through the customization and extension experiments of the security strategy,the feasibility of the security service model and its SDEN implementation method is verified and analyzed.Results show that the security service model proposed in this paper can ensure the effectiveness of security services,and can support the on-demand customization and extension of security policies.