Packet Forwarding Authentication Method Based on Pre-sequence in SDN

Packet forwarding authentication is an important challenge in the field of Software-Defined Network (SDN) security. Aiming at the lack of effective packet sampling model and consistency verification mechanism in the current SDN network, this paper presents a packet forwarding authentication method based on pre-sequence. Firstly, the sampling range is restricted according to the random generation function and the characteristic information of the packet, packet sampling model is established, and the data stream is randomly marked. Secondly, design a method to dynamically adjust the identification probability based on the pre-sequence to reduce the packet authentication overhead in the network, and establish a packet inspection information database through a unified formal description language, so as to realize the integrity measurement of the packet according to the identification sequence mapping matching result, to ensure the effectiveness of packet consistency conflict detection. Finally, performance evaluation through simulation experiments is conducted. The results show that this method can effectively solve security threats such as packet forwarding, tampering and forgery while introducing 10.2% overhead.