通信学报2025，Vol.46Issue(3)：74-93,20.DOI:10.11959/j.issn.1000-436x.2025034
面向SDN的攻击流量分配与负载均衡机制
Attack traffic allocation and load balancing mechanism for SDN
摘要
Abstract
To tackle the problem of traditional traffic allocation methods in software-defined networks(SDN)potentially failing to effectively detect distributed denial of service(DDoS)attacks,a traffic allocation and load balancing mecha-nism for attack traffic was proposed.The traffic allocation problem was modeled as a Markov decision process(MDP),where the reward function included both resource consumption and delay.To optimize the MDP,a load balancing algo-rithm based on actor-critic networks was developed.This algorithm allocated traffic to different paths based on traffic and network features with the goal of reducing load and latency.The experimental results demonstrate that,under self-generated and public datasets,the proposed method achieves higher reward than the baseline load balancing methods,in-dicating its superior performance in load balancing.In terms of throughput,it exhibits high stability with a relatively small variation range,fluctuating between 12.95 Mbit/s and 14.83 Mbit/s.Regarding traffic distribution,the traffic is relatively evenly distributed across all paths.In terms of detection performance,the average weighted precision,average weighted recall,and average weighted F1 score are 90%,92%and 94%,respectively.关键词
SDN/流量分配/负载均衡/DDoS攻击Key words
SDN/traffic allocation/load balance/DDoS attack分类
信息技术与安全科学引用本文复制引用
李曼,周华春,徐琪,邓双兴,邹涛,张汝云..面向SDN的攻击流量分配与负载均衡机制[J].通信学报,2025,46(3):74-93,20.基金项目
国家重点研发计划基金资助项目(No.2018YFA0701604) （No.2018YFA0701604）
国家自然科学基金资助项目(No.62341102) （No.62341102）
浙江省重点研发计划基金资助项目(No.2024SSYS0001) （No.2024SSYS0001）
山东省自然科学基金资助项目(No.ZR2023LZH017) The National Key Research and Development Program of China(No.2018YFA0701604),The National Natu-ral Science Foundation of China(No.62341102),The National Key Research and Development Program of Zhejiang Province(No.2024SSYS0001),The National Natural Science Foundation of Shandong Province(No.ZR2023LZH017) （No.ZR2023LZH017）
