Hauth:A Novel Approach for Network Visibility Protection

Wang, Xin; Gao, Neng; Zhang, Ling-chen

doi:10.2991/cnct-16.2017.18

Cited by 1 publication

(1 citation statement)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, it ignored the origin of Packet-In messages in handling the host location hijacking attack. In [21], Hauth proposed solving the host usurp attack. It implemented the confirmation for legal hosts by providing an authentication server and authentication log.…”

Section: Related Workmentioning

confidence: 99%

Packet Injection Exploiting Attack and Mitigation in Software-Defined Networks

Qin

et al. 2022

Applied Sciences

View full text Add to dashboard Cite

Software-defined networking (SDN) decouples the control plane and data plane through OpenFlow technology and allows flexible network control. It has been widely applied in different areas and has become a focus of attention in the future network. With SDN’s development, its security problem has become a necessary point of research to be solved urgently. In this paper, we propose a novel attack, namely, the packet injection exploiting attack. By maliciously injecting false hosts into SDN network topology, attackers can further use them to launch a denial of service (DoS) attack. The consequences affect the throughput and processing capabilities of the controller, severely consume data plane resources, and ultimately affect the entire network. To prevent the packet-injection exploiting attack, we designed PIEDefender, an efficient, protocol-independent component built on SDN controllers to detect and mitigate attacks effectively. We implement the PIEDefender prototype on the Floodlight controller and assess the effectiveness in the software environment. Experimental results show that PIEDefender achieves a 97.8% injection detection precision and a 97.96% DoS detection precision, incurring an average CPU consumption of 10%. The evaluation demonstrates that the PIEDefender can effectively mitigate the attack against SDN with limited overhead.

show abstract

Section: Related Workmentioning

confidence: 99%