.png){kind=icon}
返回
Attacks Notification of Differentiated Services Code Point (DSCP) Values Modifications
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2023.3332119.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The DSCP is an integral component within the Internet Protocol (IP) header of a packet, serving the purpose of categorizing and administering network traffic, as well as facilitating the provision of Quality of Service (QoS) on IP networks. In the context of network communication, it is feasible for an adversary to transmit packets with a DSCP value of x, which represents a high priority. This action aims to prioritize the specified packet over other network traffic packets without triggering any notifications during the transmission session. It is possible to use identical DSCP values for both offensive and defensive purposes. This study therefore proposed a method for generating attack notifications in response to changes in DSCP values by using binary vectors to represent entries that detect attacks and those that do not. The method returns a list of Boolean values, each of which indicates whether or not the corresponding packet was classified as an attack. The study employed an experimental research methodology to generate transmission scenarios in which an attacker would attempt to transmit packets with a malicious DSCP value so that they would be prioritized over other traffic. A function was developed to detect deviation from normal and modification values involving DSCP value operations of normal traffic and generate alert. The finding of the experimental analysis indicates the vector, represents normal traffic because it does not have a DSCP value associated with an attack. The vectors representing spoofed, Assured Forwarding (AF), Class Selector (CS) and Expedited Forwarding (EF) respectively and generate an alert based on their values. This has contributed in detecting when an attacker tries to send packets with modified DSCP value in order to get them prioritized over the other packet on the normal traffic.
Keyword:
Assured forwarding
class selector
differentiated services
expedited forwarding
vector space
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
eBPF: A New Approach to Cloud-Native Observability, Networking and Security for Current (5G) and Future Mobile Networks (6G and Beyond).png)
IEEE ACCESSOAAI
IEEE ACCESSIF3.6
OAAI分享收藏
P4sec: Automated Deployment of 802.1X, IPsec, and MACsec Network Protection in P4-Based SDNP4sec: 在P4-Based SDN中自动部署802.1X、IPsec和MACsec网络保护IEEE ACCESSOAAI
IEEE ACCESSIF3.6
OAAI分享收藏SHE Networks: Security, Health, and Emergency Networks Traffic Priority Management Based on ML and SDNIEEE ACCESSOAAI
IEEE ACCESSIF3.6
OAAI分享收藏
查看更多内容