A System for Source Address Authentication and Anonymous Communication Based on SDN. (September 2020) - Li, Ming
Abstract: Based on the idea of SDN (Software Defined Network) management and control separation and the development convenience provided by the programmable interface, we conduct the research on the security during the communication security, and protection for anonymity: (1) For the problem of communication security, we design two source address authentication schemes to detect whether the source host is legal. (2) For the problem of anonymity protection, A series of changes of the IP address in data packets by intermediate SDN switches make it difficult for the attacker to obtain information from both parties in communication. And to ensure that the address generated after the execution of those changes can uniquely identify the current data stream, we proposed the Improved-MAGA algorithm based on MAGA (M-Address Generation Algorithm). (3) For the shortest path routing algorithm, which maybe result in hot-links problems, the measurement link bandwidth utilization is added as a weight vector in the routing process to solve the problem of excessive link load caused by the default routing algorithm.