【摘要】 软件定义网络(Software Defined Network, SDN)是一种新型的网络架构，相比于传统网络，简化了网络管理并更好地支持网络流量的动态控制，现已被许多应用领域采用。为了增强SDN的异常检测与防御能力，在拜占庭容错机制的基础上，提出一种异常检测方法，对异常或错误的指令容错，保证正确下发流表，同时通过理论分析证明该方法的有效性和安全性。实验表明，在SDN网络环境中，该检测方法能够快速检测出异常网络设备，降低SDN异常检测中的漏报率和误报率。更多还原

【Abstract】 Software defined network(SDN) is a new type of network architecture that simplifies network management and better supports dynamic control of network traffic compared with traditional networks, and has been adopted by many application fields. In order to enhance the anomaly detection and defense capabilities of SDN, an anomaly detection method was proposed based on the Byzantine fault-tolerant mechanism, which was fault-tolerant for abnormal or erroneous instructions and ensured the correct delivery of the flow table. The effectiveness and safety of this method were demonstrated through theoretical analysis. Experiments show that in the SDN environment, the detection method can quickly detect abnormal network devices and reduce the false negative rate and false positive rate in SDN anomaly detection.更多还原