Real-time detection of distributed denial-of-service attacks using RBF networks and statistical features

The Border Gateway Protocol (BGP) is the de facto interdomain routing protocol on the Internet. While the serious vulnerabilities of BGP are well known, no security solution has been widely deployed. The lack of adoption is largely caused by a failure to find a balance between deployability, cost, and security. In this paper, we consider the design and performance of BGP path authentication constructions that limit resource costs by exploiting route stability. Based on a year-long study of BGP traffic and indirectly supported by findings within the networking community, we observe that routing paths are highly stable. This observation leads to comprehensive and efficient constructions for path authentication. We empirically analyze the resource consumption of the proposed constructions via trace-based simulations. This latter study indicates that our constructions can reduce validation costs by as much as 97.3% over existing proposals while requiring nominal storage resources. We conclude by considering operational issues related to incremental deployment of our solution.

/pdf/optimizing-bgp-security-by-exploiting-path-stability-14nvd5zaoz.pdf

Optimizing BGP security by exploiting path stability

The Border Gateway Protocol (BGP) is the de facto interdomain routing protocol of the Internet. Although the performance BGP has been historically acceptable, there are mounting concerns about its ability to meet the needs of the rapidly evolving Internet. A central limitation of BGP is its failure to adequately address security. Recent outages and security analyses clearly indicate that the Internet routing infrastructure is highly vulnerable. Moreover, the design and ubiquity of BGP has frustrated past e!orts at securing interdomain routing. This paper considers the vulnerabilities of existing interdomain routing and surveys works relating to BGP security. The limitations and advantages of proposed solutions are explored, and the systemic and operational implications of their design considered. We centrally note that no current solution has yet found an adequate balance between comprehensive security and deployment cost. This work calls not only for the application of ideas described within this paper, but also for further introspection on the problems and solutions of BGP security.

/pdf/a-survey-of-bgp-security-5gsh0rn4sa.pdf

A Survey of BGP Security

A network operating the Internet Control Message Protocol (ICMP) router Discovery Protocol (IRDP) on an Internet protocol (IP) based network on a mobile platform which supports automatic failover of the network's default router to one or more onboard back-up routers. A security safeguard is also implemented by including packet filters at each one of a plurality of seat electronics box (SEB) stations on the mobile platform which allows ICMP Type 9 and Type 10 packets transmitted on the network to be blocked. The filters further allow each SEB to accept only advertisements from pre-designated addresses of routers operating on the network.

Router discovery protocol on a mobile internet protocol based network

Prioritised best effort routing with four quality of service metrics applying the concept of the analytic hierarchy process

https://security.polito.it/doc/public/torsec_tnc2000_icmp_security.pdf

Madalina Baltatu

Papers

Security issues in control, management and routing protocols