usingSoftware-DenedNetworks.PDF

iTAP: In-network Traffic Analysis Prevention using Software-Defined Networks https://itap.ethz.ch Roland Meier David Gugelmann Laurent Vanbever ETH Zürich ETH Zürich ETH Zürich meierrol@ethz.ch gugelmann@tik.ee.ethz.ch lvanbever@ethz.ch ABSTRACT CCS Concepts Advances in layer 2 networking technologies have fostered Security and privacy Pseudonymity, anonymity and the deployment of large, geographically distributed LANs. untraceability; Network security; Networks Network Due to their large diameter, such LANs provide many van- privacy and anonymity; Programmable networks; tage points for wiretapping. As an example, Google’s inter- nal network was reportedly tapped by governmental agen- Keywords cies, forcing the Web giant to encrypt its internal traffic. While using encryption certainly helps, eavesdroppers can Anonymous communication; wiretapping; SDN still access traffic metadata which often reveals sensitive information, such as who communicates with whom and 1. INTRODUCTION which are the critical hubs in the infrastructure. Since the Snowden revelations, it is well-known that net- This paper presents iTAP, a system for providing strong work eavesdropping was (and probably still is) performed in anonymity guarantees within a network. iTAP is network-