TY - GEN
T1 - On the vulnerability of hardware hash tables to sophisticated attacks
AU - Ben-Porat, Udi
AU - Bremler-Barr, Anat
AU - Levy, Hanoch
AU - Plattner, Bernhard
PY - 2012
Y1 - 2012
N2 - Peacock and Cuckoo hashing schemes are currently the most studied hash implementations for hardware network systems (such as NIDS, Firewalls, etc.). In this work we evaluate their vulnerability to sophisticated complexity Denial of Service (DoS) attacks. We show that an attacker can use insertion of carefully selected keys to hit the Peacock and Cuckoo hashing schemes at their weakest points. For the Peacock Hashing, we show that after the attacker fills up only a fraction (typically 5% - 10%) of the buckets, the table completely loses its ability to handle collisions, causing the discard rate (of new keys) to increase dramatically (100 - 1,800 times higher). For the Cuckoo Hashing, we show an attack that can impose on the system an excessive number of memory accesses and degrade its performance. We analyze the vulnerability of the system as a function of the critical parameters and provide simulations results as well.
AB - Peacock and Cuckoo hashing schemes are currently the most studied hash implementations for hardware network systems (such as NIDS, Firewalls, etc.). In this work we evaluate their vulnerability to sophisticated complexity Denial of Service (DoS) attacks. We show that an attacker can use insertion of carefully selected keys to hit the Peacock and Cuckoo hashing schemes at their weakest points. For the Peacock Hashing, we show that after the attacker fills up only a fraction (typically 5% - 10%) of the buckets, the table completely loses its ability to handle collisions, causing the discard rate (of new keys) to increase dramatically (100 - 1,800 times higher). For the Cuckoo Hashing, we show an attack that can impose on the system an excessive number of memory accesses and degrade its performance. We analyze the vulnerability of the system as a function of the critical parameters and provide simulations results as well.
UR - http://www.scopus.com/inward/record.url?scp=84861658039&partnerID=8YFLogxK
U2 - https://doi.org/10.1007/978-3-642-30045-5_11
DO - https://doi.org/10.1007/978-3-642-30045-5_11
M3 - منشور من مؤتمر
SN - 9783642300448
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 135
EP - 148
BT - NETWORKING 2012 - 11th International IFIP TC 6 Networking Conference, Proceedings
T2 - 11th International IFIP TC 6 Networking Conference, NETWORKING 2012
Y2 - 21 May 2012 through 25 May 2012
ER -