Software-defined network (SDN) is characterized by its programmability, flexibility, and the separation of control and data planes. However, SDN still have many challenges, particularly concerning the security of network information synchronization and network element registration. Blockchain and intent-driven networks are recent technologies to establish secure and intelligent SDN. This article investigates the blockchain-based architecture and intent-driven mechanisms to implement intent-driven security software-defined networks (IS2N). Specifically, we propose a novel four-layer architecture of the IS2N with security capabilities. We integrate an intent-driven security management mechanism in the IS2N to achieve automate network security management. Finally, we develop an IS2N platform with blockchain middle-layer to achieve security capabilities and security store network-level snapshots, such as device registration and OpenFlow messages. Our simulations show that IS2N is more flexible than conventional strategies at resolving problems during network operations and has a minimal effect on the SDN.

翻译：软件定义网络（SDN）以其可编程性、灵活性以及控制与数据平面的分离为特点。然而，SDN仍面临诸多挑战，尤其是在网络信息同步和网元注册的安全性方面。区块链和意图驱动网络是构建安全智能SDN的新兴技术。本文研究了基于区块链的架构和意图驱动机制，以实现意图驱动的安全软件定义网络（IS2N）。具体而言，我们提出了一种具有安全能力的四层IS2N架构。在IS2N中集成了意图驱动的安全管理机制，以实现自动化网络安全策略管理。最后，我们开发了一个带有区块链中间层的IS2N平台，以实现安全能力并安全存储网络级快照（如设备注册和OpenFlow消息）。仿真结果表明，IS2N在解决网络运行中的问题方面比传统策略更具灵活性，且对SDN的影响极小。