首页> 外文会议>International Scientific and Technical Conference Modern Computer Network Technologies >Traffic Analysis Countermeasures Using Software-Defined Internet Exchanges
【24h】

Traffic Analysis Countermeasures Using Software-Defined Internet Exchanges

机译:使用软件定义的互联网交换的交通分析对策

获取原文

摘要

The current Internet architecture has a fixed mapping of IP addresses/ranges to services and client organizations. This makes it easy for individuals to hijack sessions, perform traffic analysis, launch denial of service (DoS) attacks, and create man in the middle (MitM) attacks. This paper discusses experimentation using a border gateway protocol (BGP) testbed, a large range of IPV6 space, and software defined networking (SDN) to create software defined Internet exchanges (SDX) that create random mappings between clients and software services. This paper first discusses traffic analysis vulnerabilities inherent in the current approach. It then consider an ideal approach, which removes these problems but is inconsistent with current practice. Finally, the paper concludes by describing a prototype SDX that mitigates current vulnerabilities.
机译:目前的Internet架构对服务和客户组织的IP地址/范围有固定映射。这使得个人能够劫持会话,执行流量分析,启动拒绝服务(DOS)攻击,并在中间(MITM)攻击中创建人。本文讨论了使用边界网关协议(BGP)测试的实验,大量IPv6空间和软件定义的网络(SDN)来创建在客户端和软件服务之间创建随机映射的软件定义的Internet交换机(SDX)。本文首先讨论了当前方法中固有的交通分析漏洞。然后,它考虑一种理想的方法,它消除了这些问题,但与目前的实践不一致。最后,本文通过描述了减轻当前漏洞的原型SDX的结论。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号