Analysis of SDN Attack and Defense Strategy Based on Zero-Sum Game

Software Defined Network is a huge innovation in the field of computer networks. This technology implements software to control forwarding routing packets. The SDN controller can realize the use of the control plane, to manage various virtual exchange forwarding devices, thereby saving a lot of money, and shortening the development test cycle of SDN. However, with the advent of SDN-related network equipment, security issues have become an important factor constraining its development. This paper designs and simulates an SDN packet sampling strategy, using zero-sum game and analyzing the security of multiple SDN topology networks. The SDN packet sampling problem is modeled as a zero-sum security game, in which both attackers and defenders participate, and the importance of each point is quantified into the income value. The income of the attackers and defenders are determined according to the income value. Under the knowledge of incomes of attack and defense, we determine the SDN topology with the highest security performance and security defense strategy.