基于嗅探技术的字段操纵攻击研究

Field Manipulation Attacks Based on Sniffing Techniques

软件定义网络(SDN)为网络基础设施提供灵活性、可管理性以及可编程性的同时,引入了诸多新型的攻击向量。该文介绍了攻击者针对OpenFlow关键字段发起的恶意操纵攻击,并设计了3种基于数据包转发时延的嗅探技术以保证字段操纵攻击在真实SDN网络中的可实施性。实验结果表明,字段操纵攻击严重消耗了SDN网络资源,进而导致合法用户之间的通信性能明显降低。

The flexibility,manageability,and programmability brought by Software-Defined Networking(SDN),however come at the cost of new attack vectors.Malicious manipulation attacks against the key fields in OpenFlow is proposed,and three sniffing technologies based on forwarding delay to ensure the feasibility of manipulation attacks are designed.The experimental results show that the field manipulation attacks consume SDN resources greatly,leading to a significant decrease in the communication performance between legitimate users.