基于嗅探技术的字段操纵攻击研究  

Field Manipulation Attacks Based on Sniffing Techniques

作　　者：徐建峰 张方韬 徐震[1] 王利明[1] XU Jianfeng;ZHANG Fangtao;XU Zhen;WANG Liming(Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China;School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049,China)

机构地区：[1]中国科学院信息工程研究所,北京100093 [2]中国科学院大学网络空间安全学院,北京100049

出　　处：《电子与信息学报》2020年第10期2342-2349,共8页Journal of Electronics & Information Technology

基　　金：北京市科技计划项目(Z181100002718003)。

摘　　要：软件定义网络(SDN)为网络基础设施提供灵活性、可管理性以及可编程性的同时,引入了诸多新型的攻击向量。该文介绍了攻击者针对OpenFlow关键字段发起的恶意操纵攻击,并设计了3种基于数据包转发时延的嗅探技术以保证字段操纵攻击在真实SDN网络中的可实施性。实验结果表明,字段操纵攻击严重消耗了SDN网络资源,进而导致合法用户之间的通信性能明显降低。The flexibility,manageability,and programmability brought by Software-Defined Networking(SDN),however come at the cost of new attack vectors.Malicious manipulation attacks against the key fields in OpenFlow is proposed,and three sniffing technologies based on forwarding delay to ensure the feasibility of manipulation attacks are designed.The experimental results show that the field manipulation attacks consume SDN resources greatly,leading to a significant decrease in the communication performance between legitimate users.

关 键 词：软件定义网络 OpenFlow 字段操纵攻击 嗅探 

分 类 号：TN918[电子电信—通信与信息系统] TP393[电子电信—信息与通信工程]