NDLI: iTAP: In-network Traffic Analysis Prevention using Software-Defined Networks

Please wait, while we are loading the content...

SDX-Based Flexibility or Internet Correctness?: Pick Two!

Adversarial Network Forensics in Software Defined Networking: Demo

Adversarial Network Forensics in Software Defined Networking

MPVisor: A Modular Programmable Data Plane Hypervisor

Decentralized Consistent Updates in SDN

SDN-enabled Traffic Engineering and Advanced Blackholing at IXPs

Piggybacking Network Functions on SDN Reactive Routing: A Feasibility Study

PRAM: Priority-aware Flow Migration Scheme in NFV Networks

Let me rephrase that: Transparent optimization in SDNs

Gotthard: Network Support for Transaction Processing

Concise Encoding of Flow Attributes in SDN Switches

Meticulous Measurement of Control Packets in SDN

Dapper: Data Plane Performance Diagnosis of TCP

IPv6 Segment Routing to the End Host: A Linux Kernel Implementation: Demo

Magneto: Unified Fine-grained Path Control in Legacy and OpenFlow Hybrid Networks

Enabling Fast Hierarchical Heavy Hitter Detection using Programmable Data Planes

BigBug: Practical Concurrency Analysis for SDN

Implementing iptables using a programmable stateful data plane abstraction: Demo

Whippersnapper: A P4 Language Benchmark Suite

Towards an OS for the Network Data Plane

iTAP: In-network Traffic Analysis Prevention using Software-Defined Networks

PVPP: A Programmable Vector Packet Processor

Swing State: Consistent Updates for Stateful and Programmable Data Planes

Delorean: Using Time Travel to Avoid Bugs and Failures in SDN Applications

P4FPGA: A Rapid Prototyping Framework for P4

Siren: A Platform for Deployment of VNFs in Distributed Infrastructures

P5: Policy-driven optimization of P4 pipeline

Automating SDN Composition: A Database Perspective

ParaBox: Exploiting Parallelism for Virtual Network Functions in Service Chaining

Programming Distributed Control Planes: Invited Demo: Demo

The Case for Making Tight Control Plane Latency Guarantees in SDN Switches

NEAt: Network Error Auto-Correct

Heavy-Hitter Detection Entirely in the Data Plane

iTAP: In-network Traffic Analysis Prevention using Software-Defined Networks

Content Provider	ACM Digital Library
Author	Gugelmann, David Meier, Roland Vanbever, Laurent
Abstract	Advances in layer 2 networking technologies have fostered the deployment of large, geographically distributed LANs. Due to their large diameter, such LANs provide many vantage points for wiretapping. As an example, Google's internal network was reportedly tapped by governmental agencies, forcing the Web giant to encrypt its internal traffic. While using encryption certainly helps, eavesdroppers can still access traffic metadata which often reveals sensitive information, such as who communicates with whom and which are the critical hubs in the infrastructure. This paper presents iTAP, a system for providing strong anonymity guarantees within a network. iTAP is network-based and can be partially deployed. Akin to onion routing, iTAP rewrites packet headers at the network edges by leveraging SDN devices. As large LANs can see millions of flows, the key challenge is to rewrite headers in a way that guarantees strong anonymity while, at the same time, scaling the control-plane (number of events) and the data-plane (number of flow rules). iTAP addresses these challenges by adopting a hybrid rewriting scheme. Specifically, iTAP scales by reusing rewriting rules across distinct flows and by distributing them on multiple switches. As reusing headers leaks information, iTAP monitors this leakage and adapts the rewriting rules before any eavesdropper could provably de-anonymize any host. We implemented iTAP and evaluated it using real network traffic traces. We show that iTAP works in practice, on existing hardware, and that deploying few SDN switches is enough to protect a large share of the network traffic.
Starting Page	102
Ending Page	114
Page Count	13
File Format	PDF
ISBN	9781450349475
DOI	10.1145/3050220.3050232
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-04-03
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Anonymous communication Sdn Wiretapping
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in