全要素SDN指纹攻击及其模糊混淆防御机制研究  

Research on a Full-Factor SDN Fingerprint Attack and Its Fuzzy Confusion Defense Mechanism

作　　者：王涛 陈鸿昶 WANG Tao;CHEN Hong-chang(PLA Strategic Support Force Information Engineering University,Zhengzhou,Henan 450003,China)

机构地区：[1]中国人民解放军战略支援部队信息工程大学,河南郑州450003

出　　处：《电子学报》2020年第6期1213-1219,共7页Acta Electronica Sinica

基　　金：国家重点研发计划课题(No.2018YFB0804004);国家自然科学基金创新研究群体项目(No.61521003)。

摘　　要：软件定义网络(Software-Defined Networking,SDN)的“三层两接口”架构使攻击者可以通过分析数据包往返时延分布规律推测网络类型、控制器类型及关键流规则等指纹信息.目前SDN指纹攻击及其防御研究基本处于空白状态,为此,本文系统构建了全要素SDN指纹攻击链,并在双重时间维度分别设计了概率加扰和控制器混淆调度防御机制,通过渐变概率加扰与最优混淆调度协同提升SDN指纹信息隐藏度.实验结果表明该机制能够在有效隐藏SD N指纹信息的同时减少对网络性能的影响.The“three-layer two-interface”architecture of software-defined networking(SDN)enables attackers to infer fingerprint information such as network type,controller type,and key flow rules by analyzing the round-trip time dis tribution of packets.Currently SDN fingerprint attack and its defense research are not mature,so this paper constructs a full-factor SDN fingerprint at tack chain.Then,the probabilistic scrambling mechanism and controller dynamic confusion scheduling mechanism are designed in the dual time dimension respective ly.More specifically,the gradient probabilistic scrambling and optimal confusi on scheduling synergistically promote the information hiding degree of SDN finge rprint.The experimental results show that the mechanism can effectively hide the SDN fingerprint information while reducing the impact on network performance.

关 键 词：SDN指纹攻击 往返时延 模糊混淆 指纹信息隐藏 概率加扰 动态混淆调度 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]