P4Control: Line-Rate Cross-Host Attack Prevention via In-Network Information Flow Control Enabled by Programmable Switches and eBPF

arXiv:2405.14970v1 Announce Type: new
Abstract: Modern targeted attacks such as Advanced Persistent Threats use multiple hosts as stepping stones and move laterally across them to gain deeper access to the network. However, existing defenses lack end-to-end information flow visibility across hosts and cannot block cross-host attack traffic in real time. In this paper, we propose P4Control, a network defense system that precisely confines end-to-end information flows in a network and prevents cross-host attacks at line rate. P4Control introduces a novel …

access advanced advanced persistent threats arxiv attack attack prevention attacks block control cs.cr cs.ni defenses ebpf end end-to-end flow host hosts information line network persistent persistent threats prevention rate switches targeted attacks threats visibility