Huawei Technologies Co., Limited

Future Wei Technologies, Inc.

Yingjun Tian

Yu Zhang

Ke Lin

Yongcan Wang

Jiao Wang

Min Luo

Quancai Li

Zhengxian Zhang

A malicious attack detection method includes receiving, by a controller, a packet-in message sent by a switch, sending, by the controller, an abnormal flow entry to the switch, receiving, by the controller, a triggering count sent by the switch, where the triggering count is a quantity of times that the abnormal flow entry is triggered, and determining, according to the triggering count, whether a malicious attack is initiated.

Method and apparatus for malicious attack detection in a software defined network (SDN)

A dialing test method, a dialing test system, and a computing node relate to the network field. In this method, a dialing test system respectively creates a two dialing test ports on two computing nodes, where both Internet Protocol (IP) addresses of the two dialing test ports are IP addresses of a dialing test network, and the dialing test network does not overlap a service network of a virtual machine (VM). The dialing test system separately deploys respective dialing test resources for the two dialing test ports, and the dialing test resources does not overlap a resource of the VM on the two computing nodes, and the dialing test system triggers a dialing test procedure such that a dialing test task is executed between the two dialing test ports using the dialing test resources.

Dialing test method, dialing test system, and computing node

A malicious attack detection method includes: receiving, by a controller, a Packet-in message sent by a switch, where the Packet-in message includes a source host identifier and a destination host identifier of a data packet for which the switch does not find a flow entry; when determining that a host indicated by the destination host identifier does not exist in an SDN network, sending, by the controller, an abnormal flow entry to the switch; receiving, by the controller, a triggering count sent by the switch, where the triggering count is a quantity of times that the abnormal flow entry is triggered; and determining, according to the triggering count, whether a malicious attack is initiated. According to the method, a malicious attack from a host can be detected, a data processing volume of a controller can be reduced, and performance of the controller can be improved.

Method and apparatus for malicious attack detection in an SDN network

A preset flow table matching policy in a switching device is set, a flow table for processing data by a switching device that the data needs to pass through during forwarding and an action that needs to be executed in the flow table are generated according to the matching policy and capability information of the switching device, and the flow table is sent to the switching device that the data needs to pass through during forwarding such that the control device may generate, according to different flow table information of the switching device and with reference to different data forwarding policies, a corresponding flow table to be executed by the switching device, which manages switching devices of different types, and enables a switching device that has multiple flow tables to flexibly implement a data forwarding function in use of a preset policy.

Control device and control method in SDN network

A method for distributing routing instructions to a plurality of nodes within an OpenFlow Software Defined Network (SDN) using a logically centralized multi-controller that comprises a plurality of controllers, wherein the method comprises receiving a plurality of incoming data packets, storing a plurality of current flow tables, queuing the incoming data packets, wherein the incoming data packets are queued based on the order received, processing the incoming data packets based on the order the incoming data packets were queued, wherein the incoming data packets that are first to be queued are the first to be processed, generating a plurality of flow tables by processing the incoming data packets, and transmitting the flow tables to the plurality of nodes when the flow tables have not been previously generated.

Growing community of inventors

Hangzhou, China

Yingjun Tian