Securing Forwarding Layers from Eavesdropping Attacks Using Proactive Approaches  

作　　者：Jiajun Yan Ying Zhou Anchen Dai Tao Wang 

机构地区：[1]School of Electronics and Communication Engineering,Sun Yat-sen University,Shenzhen,518107,China

出　　处：《Computers, Materials & Continua》2024年第4期563-580,共18页计算机、材料和连续体（英文）

基　　金：the Natural Science Foundation of Guangdong Province under Grant Number 2021A1515011910;by the Shenzhen Science and Technology Program under Grant No.KQTD20190929172704911。

摘　　要：As an emerging network paradigm,the software-defined network(SDN)finds extensive application in areas such as smart grids,the Internet of Things(IoT),and edge computing.The forwarding layer in software-defined networks is susceptible to eavesdropping attacks.Route hopping is amoving target defense(MTD)technology that is frequently employed to resist eavesdropping attacks.In the traditional route hopping technology,both request and reply packets use the same hopping path.If an eavesdropping attacker monitors the nodes along this path,the risk of 100%data leakage becomes substantial.In this paper,we present an effective route hopping approach,called two-day different path(TDP),that turns communication paths into untraceable moving targets.This technology minimizes the probability of data leakage by transmitting request data and reply data through different paths.Firstly,a brief introduction to the network model and attack model involved in this paper is given.Secondly,the algorithm and processingmethod of the TDP are proposed.Thirdly,the paper proposes three differentmetrics tomeasure the effectiveness of the proposed approach.Finally,theoretical analysis and simulation results show that the TDP can effectively reduce the percentage of data exposure,decrease eavesdropping attack success probability,and improve the unpredictability of the path.

关 键 词：Route hopping moving target defense software-defined network two-way different path metrics 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]