网络拓扑混淆技术综述  

A Survey of Network Topology Obfuscation Techniques

作　　者：黄春娇 张宇[1,2] 史建焘 朱国普[1] Huang Chunjiao;Zhang Yu;Shi Jiantao;Zhu Guopu(School of Cyberspace Science,Harbin Institute of Technology,Harbin 150001;Peng Cheng Laboratory,Shenzhen,Guangdong 518055)

机构地区：[1]哈尔滨工业大学网络空间安全学院,哈尔滨150001 [2]鹏城实验室,广东深圳518055

出　　处：《信息安全研究》2025年第4期296-303,共8页Journal of Information Security Research

基　　金：国家重点研发计划项目(2022YFB3102903)。

摘　　要：链路洪泛攻击是一种利用网络拓扑发现的新型分布式拒绝服务攻击.网络拓扑混淆是一种有效对抗该攻击的防御措施,旨在攻击发生前提供主动保护.相关研究在近10年来不断取得进展,针对不同场景提出了各种拓扑混淆解决方案.全面回顾了这些技术.首先,概述了网络拓扑发现中的基本原理和拓扑泄露风险;其次,定义了网络拓扑混淆并提出了一个主动防御模型,然后将技术分为数据包修改、诱饵陷阱、路由变异和度量伪造方案;最后,对当前主流的混淆技术进行了综合比较.Link-Flooding Attack(LFA)is a novel distributed denial-of-service(DDoS)attack that exploits network topology detection.Network Topology Obfuscation serves as an effective deceptive defense mechanism against this attack,aiming to provide proactive protection before an attack occurs.Over the past decade,relevant research has continuously made progress,proposing corresponding obfuscation solutions for different scenarios and objectives.This paper comprehensively reviews the network topology obfuscation techniques.First,it combines the basic principles and classifications of network topology discovery to point out the risks of topology leakage in current network topology discovery.Next,it formally defines network topology obfuscation design and presents a proactive defense model.Then,based on the obfuscation concept,the technologies are divided into packet modification,decoy traps,routing mutation,and metric forgery schemes,and proposes a set of metrics to comprehensively compare the current mainstream network topology obfuscation techniques.

关 键 词：链路洪泛攻击 网络拓扑混淆 主动防御 欺骗防御 拓扑泄露风险 

分 类 号：TP393.02[自动化与计算机技术—计算机应用技术] TP393.08[自动化与计算机技术—计算机科学与技术]