A Method of Topology Obfuscation Based on Adding Virtual Nodes and Links
Zhicheng Zhu, Kun Lan, Yuguang Zhang · 2023
The protection of critical information infrastructure is the forefront of the current cyber space security research. This paper first introduces the concept and common methods of topological inference and topological obfuscation. Then, an improved topological obfuscation method based on adding virtual nodes and links is proposed for active topological inference represented by traceroute. It improves the deployment node selection algorithm and adds virtual nodes and links by replicating the key topologies of the real network. For an attacker using traceroute for topology inference, this approach can mislead them into getting the wrong order of node importance. Finally, the simulation results show that the proposed topological obfuscation method can effectively combat the active topological reasoning in the typical star topology network.