Network fingerprinting via timing attacks and defense in software defined networks
Computer Networks, cilt.232, 2023 (SCI-Expanded, Scopus)
- Yayın Türü: Makale / Tam Makale
- Cilt numarası: 232
- Basım Tarihi: 2023
- Doi Numarası: 10.1016/j.comnet.2023.109850
- Dergi Adı: Computer Networks
- Derginin Tarandığı İndeksler: Science Citation Index Expanded (SCI-EXPANDED), Scopus, PASCAL, ABI/INFORM, Aerospace Database, Applied Science & Technology Source, Business Source Elite, Business Source Premier, Communication Abstracts, Compendex, Computer & Applied Sciences, INSPEC, Library and Information Science Abstracts, Library, Information Science & Technology Abstracts (LISTA), Metadex, zbMATH, Civil Engineering Abstracts
- Anahtar Kelimeler: Fingerprinting, OpenFlow, Reconnaissance, SDN, SDN security
- Boğaziçi Üniversitesi Adresli: Evet
Özet
Software-Defined Networking (SDN) is becoming a native networking model for next generation networks. However, with its decoupled architecture, SDN is susceptible to reconnaissance through time inference attacks. Attackers can use probing based measurements and gather information such as network type and flow table size. In this paper, an automated attacker tool called RAFA is proposed to infer network type (SDN or traditional) and flow rule timeout values (hard and idle). Moreover, a lightweight defense mechanism to randomize rule timeouts with respect to network status is described. A comprehensive simulation setup with different network conditions shows that the proposed methods achieve superior success rate in diverse settings.