Request Complexity of VNet Topology Extraction: Dictionary-Based Attacks
Yvonne-Anne Pignolet, Stefan Schmid, Gilles Tredan

TL;DR
This paper explores how an attacker can infer the underlying substrate topology of virtual networks by issuing repeated embedding requests, using a dictionary-based approach to analyze request complexity and security vulnerabilities.
Contribution
It introduces a general framework leveraging a graph motif dictionary to infer substrate topology and provides bounds on the number of requests needed for successful extraction.
Findings
Framework effectively infers substrate topology from VNet requests
Upper bounds established on request complexity for topology extraction
Applicable to various graph classes and embedding scenarios
Abstract
The network virtualization paradigm envisions an Internet where arbitrary virtual networks (VNets) can be specified and embedded over a shared substrate (e.g., the physical infrastructure). As VNets can be requested at short notice and for a desired time period only, the paradigm enables a flexible service deployment and an efficient resource utilization. This paper investigates the security implications of such an architecture. We consider a simple model where an attacker seeks to extract secret information about the substrate topology, by issuing repeated VNet embedding requests. We present a general framework that exploits basic properties of the VNet embedding relation to infer the entire topology. Our framework is based on a graph motif dictionary applicable for various graph classes. Moreover, we provide upper bounds on the request complexity, the number of requests needed by…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSoftware-Defined Networks and 5G · Internet Traffic Analysis and Secure E-voting · Caching and Content Delivery
