Abstract:The emerging link flooding attacks (LFAs) are one type of attacks that attract significant attention in both academia and industry against the routing infrastructure. The attack traffic flows originating from bots (e.g., compromised IoT devices) are deliberately aggregated at upstream critical links and grow intensified, gradually making a network connected to the critical links disconnected. Although LFAs are far more sophisticated than traditional DDoS attacks, whether such sophistication comes without a downside has never been investigated. In this paper, by modeling link flooding attacks and defenses, we tackle a series of questions concerning the practical issues of LFAs. Specifically, from the perspective of attacks, we advance a novel notion of strike precision, and reveal that LFAs may exhibit attack interference (i.e., unexpectedly interfere the connectivity of innocent networks) which might undermine the stealthiness and persistence of LFAs. From the perspective of defenses, we make the first step to study attack intention, i.e., inversely inferring the target network to disconnect based on the identified links under attack. Furthermore, we consider a strong defender who employs traffic engineering to mitigate LFAs, and formulate the game-theoretic interactions between attackers and defenders. The experiment results show that attack interference is pervasive, and our proposed SPAH flooding strategy can substantially lower attack interference and increase strike precision. Moreover, we demonstrate that LFAs can be effectively mitigated based on traffic engineering from a game-theoretic perspective, wherein the defender can adopt non-cooperative measurement techniques to achieve light-weight and multi-protocol-based robust probe deployment.

EigenObfu: A Novel Network Topology Obfuscation Defense Method

Combination Attacks and Defenses on SDN Topology Discovery.

A Deep ConvNet-Based Countermeasure to Mitigate Link Flooding Attacks Using Software-Defined Networks

A Novel Topology Link-Controlling Approach for Active Defense of a Node in a Network

Correlation of Centralities: A Study Through Distinct Graph Robustness

Mitigating Link-flooding Attacks with Active Link Obfuscation.

New attack strategies for complex networks

SpiderNet: Enabling Bot Identification in Network Topology Obfuscation Against Link Flooding Attacks

Attack Graph Obfuscation

CORRELATION ANALYSIS OF ATTACK STRATEGIESAND ROBUSTNESS ANALYSIS ON THREE NETWORK MODELS

Linkbait: Active Link Obfuscation to Thwart Link-flooding attacks

Defending Against SDN Network Topology Poisoning Attacks

Active Link Obfuscation to Thwart Link-flooding Attacks for Internet of Things

Which Link Matters? Maintaining Connectivity of Uncertain Networks Under Adversarial Attack

Complex networks after centrality-based attacks and defense

The topology of covert conflict

On Modeling Link Flooding Attacks and Defenses

VGAE-AMF: A Novel Topology Reconstruction Algorithm for Invulnerability of Ocean Wireless Sensor Networks Based on Graph Neural Network

Topology Analysis Non-cooperative Path Measurement Localization Selected Paths Selected Paths Feature Vectors Detection Algorithm Detection Engine Measurement Schedule Measurement Schedule Feature Extraction 3

SecureNT: A Practical Framework for Efficient Topology Protection and Monitoring

Mitigating while accessing: A lightweight defense framework against link flooding attacks in SDN