An SDN-Based Dynamic Security Architecture for Space Information Networks

In the near future, the Space Information Network (SIN) will evolve into Space-earth Integrated Network, which will realize the interconnection among the Space-based Network, traditional Internet and Mobile Communication Network. The construction of the future SIN will provide the ability of global real-time communication and comprehensive information services, which makes it possess a wide application prospect. The future SIN will realize inter-satellite routing and its network capacity will be flexible, its network topology and link status will change dynamically as well, which will increase the complexity of the network management. In addition, the openness of communication link and the resources limitation of the devices will both bring security threats to the SIN. We study on the characteristics of future SIN and present a dynamic security protection architecture based on SDN (Software Defined Network). We study on the trusted authentication mechanism of dynamic networking entities and the technique of path optimization and risky-path isolated transmission. At last, we design a network intelligent security management mechanism at the top level. Our scheme can greatly improve the security of future SIN.