Employing deceptive dynamic network topology through software-defined networking
Loading...
Authors
Hughes, Jason J.
Subjects
Network mapping
Software-Defined Networking (SDN)
OpenFlow
Network Security
Computer Network Defense (CND)
Topological Deception
Software-Defined Networking (SDN)
OpenFlow
Network Security
Computer Network Defense (CND)
Topological Deception
Advisors
Beverly, Robert
Date of Issue
2014-03
Date
Mar-14
Publisher
Monterey, California: Naval Postgraduate School
Language
Abstract
Computer networks are constantly being actively probed in attempts to build topological maps of intermediate nodes and discover endpoints, either for academic research or nefarious schemes. While some networks employ recommended conventional countermea-sures to simply block such probing at the boundary or shunt such traffic to honey pot systems, other networks remain completely open either by design or neglect. Our research builds on previous work on the concept of presenting a deceptive network topology, which goes beyond conventional network security countermeasures of detecting and blocking network probe traffic. By employing the technologies from the emerging field of Software-Defined Networking and the OpenFlow protocol, we constructed a custom-built SDN controller to listen for network probes and craft customized deceptive replies to those probes. Through employment of various network probing utilities against our custom-built SDN controller in a test network environment, we are able to present a believable deceptive representation of the network topology to an adversary. Therefore, this work demonstrates that the primitives of the expand-ing OpenFlow protocol show strong potential for constructing an enterprise-grade dynamic deceptive network topology solution to protect computer networks.
Type
Thesis
Description
Series/Report No
Department
Cyber Academic Group
Organization
Identifiers
NPS Report Number
Sponsors
Funder
Format
Citation
Distribution Statement
Approved for public release; distribution is unlimited.
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.