...
首页> 外文期刊>Computer networks >Attacking distributed software-defined networks by leveraging network state consistency
【24h】

Attacking distributed software-defined networks by leveraging network state consistency

机译:通过利用网络状态一致性来攻击分布式软件定义的网络

获取原文
获取原文并翻译 | 示例
           

摘要

Distributed Software-Defined Networks (SDNs) aim to maintain a consistent network state across members of the distributed control plane. This paper introduces a novel variation to the packet-in flood designed to target distributed SDNs that synchronise the network state in a strongly consistent manner. The Event Flooding Attack (EFA) takes advantage of the characteristics of a strong consistency model to enable an attacker to distribute the adverse effect of a DoS attack across a cluster, as well as engineer inconsistency between the true network state and the control plane's view of this state. The impact of the attack is evaluated through experiments using an OpenDaylight cluster. It has been demonstrated on the testbed used in this work that an attacker can increase CPU consumption on all cluster nodes and cause inconsistency for a period of approximate to 55 s when 500 events are flooded at a frequency of 1/ms, while the same can be achieved for a period of approximate to 770 s when 2000 events are flooded at the same frequency. The impact of the attack is further demonstrated through it's collaboration with, and simplification of, an existing host impersonation attack. (C) 2019 Published by Elsevier B.V.
机译:分布式软件定义网络(SDN)旨在在分布式控制平面成员之间维护一致的网络状态。本文介绍了一种针对报文泛洪的新颖变体,旨在针对以强烈一致的方式同步网络状态的分布式SDN。事件泛洪攻击(EFA)利用强一致性模型的特性,使攻击者能够在群集中分布DoS攻击的不利影响,以及真实网络状态与控制平面的观点之间的工程师不一致。这种状态。通过使用OpenDaylight群集进行实验来评估攻击的影响。在这项工作中使用的测试平台上已经证明,当以1 / ms的频率泛洪500个事件时,攻击者可以增加所有群集节点上的CPU消耗,并导致大约55 s的不一致时间。当以相同的频率淹没2000个事件时,可以达到大约770 s的时间。通过与现有主机模拟攻击的协作和简化,进一步证明了攻击的影响。 (C)2019由Elsevier B.V.发布

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号