Search

Although the newly introduced SDN and NFV technologies bring flexibility and convenience in network management, the dynamic forwarding policies introduced by SDN may cause invalidation in the network function policies, and the policies in different network functions may also cause conflicts due to their own behaviors.In order to verify the policies in SDN/NFV-based cloud network, the verification on policies between the network function and the SDN device, as well as across the network functions were considered.A unified policy expression for analysis was summarized, and policy verification scheme, framework and prototype implementation were proposed to verify the correctness of polices in different scenarios, then experiments were conducted to justify the effectiveness and performance

As one of the important national infrastructures, more and more attentions are attracted by the industrial control system for rail (ICS-R), with the rapid development of information technology and the increasingly severe network situation.The system composition of ICS-R was analyzed, the types of security threats faced by the ICS-R were summarized and analyzed, the practical cases of threat propagation were given, and the information security threat trend of ICS-R was analyzed considering the development trend of technology.Finally, several development suggestions were prospected as promising techniques.