Security vulnerabilities and solutions for packet sampling
Security vulnerabilities and solutions for packet sampling
复制标题
数据包采样的安全漏洞及解决方案
DOI：
--
复制
发表时间：
2007
期刊：
影响因子：
--
通讯作者：
Jennifer Rexford
中科院分区：
文献类型：
--
作者：
Sharon Goldberg;Jennifer Rexford
数据包采样支持一系列互联网测量应用，包括表征网络中的空间流量以实现流量工程目的，识别利用链路进行计费或入侵检测的流量，以及监控端到端数据路径质量。然而，数据包采样机制必须对敌对主机具有鲁棒性，这些主机会制作由数据包采样器不成比例地选择的数据包流。例如，僵尸网络在拒绝服务攻击中用数据包淹没网络，或者贪婪的客户试图避免因网络使用而被计费，每个人都有强烈的动机来制作逃避数据包采样器选择的数据包流。在本文中，我们专注于保护PSAMP（IETF数据包采样工作组[1]）推荐的被动数据包采样机制，以对抗敌对主机。我们表明：（1）在PSAMP章程的当前草案中建议的一些数据包采样技术存在安全漏洞，（2）安全的非协调采样可以使用带有加密随机数生成器的随机采样来实现，以及（3）安全的协调采样需要加密伪随机函数，该函数使用每次采样器向主机泄漏信息时都应更改的密钥来加密。
Packet sampling supports a range of Internet measurement applications including characterizing the spatial flow of traffic through a network for traffic engineering purposes, identifying the flows utilizing a link for billing purposes or for intrusion detection, and monitoring end-to-end data-path quality. However, packet-sampling mechanisms must be robust to adversarial hosts that craft packet streams that are disproportionately selected by a packet sampler. For example, a botnet flooding a network with packets in a denial-of-service attack, or a greedy customer trying to avoid being billed for network utilization, each have a strong incentive to craft packet streams that evade selection by the packet sampler. In this paper, we focus on securing the passive packet sampling mechanisms recommended by PSAMP (the IETF Packet Sampling working group [1]) against adversarial hosts. We show that (1) some of the packet sampling techniques suggested in current drafts of the PSAMP charter have security vulnerabilities, (2) secure uncoordinated sampling can be achieved using random sampling with a cryptographic random number generator, and (3) secure coordinated sampling requires a cryptographic pseudorandom function, keyed with a secret key that should be changed each time the sampler leaks information to the hosts.