返回
Hummingbird: Dynamic Path Validation With Hidden Equal-Probability Sampling
DOI:10.1109/TIFS.2023.3236806.png)
摘要
En 中文
Path validation has already been incrementally deployed in the Internet architecture. It secures packet forwarding by enabling end hosts to negotiate specific forwarding paths and enforcing on-path routers to prove their forwarding behaviors along these paths. Most existing path validation solutions target static paths, paying less attention to fully dynamic paths that support flexible routing. In this paper, we present Hummingbird as the first validation solution over fully dynamic paths. It features a hidden equal-probability sampling technique. Gaining efficiency via routers probabilistically sampling packets to validate, we craft the sampling probability such that each router validates a similar amount of packets given an unknown path length. We further hide the state of whether a packet has been sampled and validated using a lightweight, non-cryptographic scheme. This prevents attackers from differentiating and selectively mis-forwarding packets. We validate security and efficiency of Hummingbird through both theoretical proof and experimental evaluation.
Keyword:
Path validation
dynamic routing
hidden equal-probability sampling
期刊
IF:
8
论文数:
5.3K
被引数:
2.3W
机构
引用论文
Automatic Monocular System for Human Fall Detection Based on Variations in Silhouette Area基于轮廓区域变化的单目人体跌倒自动检测系统
Network-Wide Forwarding Anomaly Detection and Localization in Software Defined Networks软件定义网络全网转发异常检测与定位

