| 摘要 |
A method of performing secure network measurements between a verifier and a prover includes generating, by the verifier, probe request packets destined to the prover, and echoing, by the prover, corresponding probe reply packets back to the verifier. The path between the verifier and the prover traverses a network domain that includes at least one software defined network (SDN) controller and one or more SDN switches. Tampering of the network measurements by the prover is prevented by selectively influencing the probe request packets sent by the verifier or the probe reply packets sent by the prover according to programmable packet forwarding rules that the SDN controller implements on the SDN switches. |
