.png){kind=icon}
返回
Defeating Data Plane Attacks With Program Obfuscation
.png){kind=icon}
OA
AI
DOI：10.1109/TDSC.2023.3277939.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Data plane switches in software-defined networks are increasingly recognised as potential targets for attack, with recent exploits showing their vulnerability to full compromise. The serious consequences of such a breach have prompted the design of compromise detection mechanisms, which monitor switch forwarding behaviour at runtime to ensure that it has not been altered by an attack. However, such defences cannot achieve full coverage in stateful, programmable data planes, creating an opportunity for an attacker to evade detection by carefully editing a switch's forwarding program to mishandle a small subset of packets. To exploit this opportunity and avoid detection, an attacker must analyse and edit the program's behaviour within a narrow time window, which is possible when the data plane is defined by a uBPF program compiled from P4, due to the predictable compilation process. In this work, we aim to invalidate this analysis-guided attack technique with targeted obfuscation of P4-uBPF programs that increases the analysis complexity. We find that, by inserting additional program paths and syntactic dependencies between variables, we can force an attacker to analyse a higher proportion of program instructions and carry out time-consuming SMT solving to find valid program paths, rendering the previous attack technique infeasible. Furthermore, by applying our identified program optimisations, program performance can often be maintained after obfuscation. In evaluating our work, we identify the potential to improve our solution by tailoring obfuscations to individual program paths.
Keyword:
Codes
Static analysis
Runtime
Monitoring
Complexity theory
Arithmetic
Switches
Data plane security
obfuscation
P4
SDN
SMT
static analysis
UBPF
期刊
IF:
7.5
论文数:
2.4K
被引数:
9.6K
机构
引用论文
Kainic acid induced alterations in antibody recognition of connexin43 and loss of astrocytic gap junctions in rat brain.png)
Glia
GliaIF0
PREAI
分享收藏
查看更多内容