English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Substantial efforts are invested in improving network security, but thethreat landscape is rapidly evolving, particularly with the recent interest inprogrammable network hardware. We explore a new security threat, from anattacker who has gained control of such devices. While it should be obviousthat such attackers can trivially cause substantial damage, the challenge andnovelty are in doing so while preventing quick diagnosis by the operator.  We find that compromised programmable devices can easily degrade networkedapplications by orders of magnitude, while evading diagnosis by even the mostsophisticated network diagnosis methods in deployment. Two key observationsyield this result: (a) targeting a small number of packets is often enough tocause disproportionate performance degradation; and (b) new programmablehardware is an effective enabler of careful, selective targeting of packets.Our results also point to recommendations for minimizing the damage from suchattacks, ranging from known, easy to implement techniques like encryption andredundant requests, to more complex considerations that would potentially limitsome intended uses of programmable hardware. For data center contexts, we alsodiscuss application-aware monitoring and response as a potential mitigation.

Order P4-66: Characterizing and mitigating surreptitious programmable network device exploitation