道启用可编程交换机掩盖网络拓,以防御软件定义网络中的链接泛滥侦察
Xiang Li1, Jungmin Lee1, Junggab Son2
1Department of Computer Science and Engineering, Major in Bio Artificial Intelligence, Hanyang University, Ansan 15588, South Korea.
Scientific reports
|October 10, 2025
概括
软件定义网络 (SDN) 容易受到链接泛滥攻击 (LFA) 的攻击. TEPS (道启用可编程开关) 使用P4可编程开关动态模糊网络拓,以防止对手发现网络瓶.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
背景情况:
- 软件定义网络 (SDN) 提供了灵活性,但容易受到链接泛滥攻击 (LFA) 的攻击.
- 攻击者利用探测工具绘制SDN拓,并确定LFA的关键链接.
- 保护SDN拓信息对于网络安全和运营完整性至关重要.
研究的目的:
- 提出TEPS (道启用可编程开关),这是一个主动的防御系统,用于在SDN中对抗对象的侦察.
- 为了动态模糊网络拓,并从攻击者隐藏关键网络链接.
- 通过掩盖网络延迟变化来应对基于往返时间 (RTT) 的指纹攻击.
主要方法:
- TEPS利用可编程开关和P4语言来创建定制的道.
- 它操纵探测数据包以生成虚假的网络拓,阻碍准确的对手映射.
- 使用数据包延迟和流量路由的动态调整来隐藏RTT变化.
主要成果:
- TEPS有效地减少了链接重要性的分布,隐藏了网络瓶.
- 该系统成功地破坏了对抗拓侦察,并阻止了基于RTT的指纹识别.
- 观察到最小的网络开销,吞吐量减少最多3%和资源利用率增加9.57%.
结论:
- TEPS提供了一种实用且轻量级的方法来增强SDN对LFA的安全性.
- 该系统能够掩盖拓和反侦察的能力使SDN基础设施更加稳健.
- 网络管理员可以实施TEPS以保持安全可靠的SDN连接.
相关概念视频
01:25Network Function of a Circuit
636
Frequency response analysis in electrical circuits provides vital insights into a circuit's behavior as the frequency of the input signal changes. The transfer function, a mathematical tool, is instrumental in understanding this behavior. It defines the relationship between phasor output and input and comes in four types: voltage gain, current gain, transfer impedance, and transfer admittance. The critical components of the transfer function are the poles and zeros.
636
01:11IP3/DAG Signaling Pathway
14.3K
Membrane lipids such as phosphatidylinositol (PI) are precursors for several membrane-bound and soluble second messengers. Specific kinases phosphorylate PI and produce phosphorylated inositol phospholipids. One such inositol phospholipids are the phosphatidylinositol-4,5 bisphosphate [PI(4,5)P2], present in the inner half of the lipid bilayer. Upon ligand binding, GPCR stimulates Gq proteins to turn on phospholipase Cꞵ. Activated phospholipase Cꞵ cleaves PI(4,5)P2 and...
14.3K
02:28Leaky Scanning
5.6K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.6K
01:22MOSFET: Enhancement Mode
785
Enhancement-mode MOSFETs are pivotal components in electronics, distinguished by their capacity to act as highly efficient switches. They are part of the larger family of metal-oxide Semiconductor Field-Effect Transistors (MOSFETs). They are available in two types: p-channel and n-channel, each tailored to specific polarity operations.
In their basic form, enhancement-mode MOSFETs are typically non-conductive when the gate-source voltage (Vgs) is zero. This default 'off' state means no...
In their basic form, enhancement-mode MOSFETs are typically non-conductive when the gate-source voltage (Vgs) is zero. This default 'off' state means no...
785
01:30Underflow Gates
362
Underflow gates are vital for controlling water flow in irrigation canals. The three main types of underflow gates — vertical, radial, and drum gates — serve different purposes while ensuring effective flow management. Vertical gates move up and down, generating a free-flowing water jet; radial gates pivot to regulate the flow; and drum gates rotate for precise adjustments. The flow through these gates is influenced by downstream conditions, resulting in free or drowned outflow.Free and...
362
01:20MOSFET: Depletion Mode
820
Depletion-mode MOSFETs represent a unique subset of MOSFET technology, functioning fundamentally differently from their enhancement-mode counterparts. Unlike enhancement MOSFETs, which require a positive gate-source voltage (Vgs) to turn on, depletion-mode MOSFETs are inherently conductive and "normally on" devices.
The primary characteristic of depletion-mode MOSFETs is their ability to conduct current between the drain and source terminals without gate bias. This inherent conductivity...
The primary characteristic of depletion-mode MOSFETs is their ability to conduct current between the drain and source terminals without gate bias. This inherent conductivity...
820