Beware of BGP attacks

Computer Communication Review

Volumn 34, Issue 2, 2004, Pages 1-8

  Nordström, Ola ^a   Dovrolis, Constantinos ^a  

^a Georgia Institute of Technology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BGP ATTACKS; ROUTING INFRASTRUCTURE; ROUTING SECURITY;

COMPUTER NETWORKS; INTERNET; NETWORK PROTOCOLS; OPTIMIZATION;

SECURITY OF DATA;

EID: 11244338691     PISSN: 01464833     EISSN: 01464833     Source Type: Conference Proceeding    
DOI: 10.1145/997150.997152     Document Type: Review

References (32)

1. A. Chakrabarti and G. Manimaran, "Internet Infrastructure Security: A Taxonomy," IEEE Network, vol. 16, no. 6, pp. 13-21, Nov. 2002.
2. P. Papadimitratos and Z. J. Haas, "Securing the Internet Routing Infrastructure," IEEE Commmunications Magazine, Oct. 2002.
3. R. J. Perlman, "Network Layer Protocols with Byzantine Robustness," Ph.D. dissertation, Department of Electrical Engineering and Computer Science, MIT, 1988.
4. Y. Rekhter and T. Li, A Border Gateway Protocol 4 (BGP-4), Mar. 1995, RFC 1771.
5. J. W. Stewart, BGPv4: Inter-Domain Routing in the Internet. Addison-Wesley, 1999.
6. R. Mahajan, D. Wetherall, and T. Anderson, "Understanding BGP Misconfiguration," in Proceedings of ACM Sigcomm, Aug. 2002, pp. 3-16.
7. V. J. Bono, "7007 Explanation and Apology," http://www.merit.edu/mail.archives/nanog/1997-04/msg00444.html, Apr. 1997.
8. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. F. Wu, and L. Zhang, "An Analysis of BGP Multiple Origin AS (MOAS) Conflicts," in Proceedings of ACM Internet Measurement Workshop, Nov. 2001.
9. C. Labovitz, A. Ahuja, A. Bose, and F. Jahanian, "Delayed Internet Routing Convergence," in Proceedings of ACM SIGCOMM, 2000.
10. Z. M. Mao, R. Govindan, G. Varghese, and R. H. Katz, "Route Flap Damping Exacerbates Internet Routing Convergence," in Proceedings of ACM SIGCOMM, Oct. 2002.
11. E. G. Coffman, Z. Ge, V. Misra, and D. Towsley, "Network Resilience: Exploring Cascading Failures within BGP," in Proceedings of Allerton Conference on Communications, Computing, and Control, 2001.
12. S. M. Bellovin and E. R. Gansner, "Using Link Cuts to Attack Internet Routing," ATT Research, Tech. Rep., 2004.
13. J. Cowie, A. Ogielski, B. J. Premore, and Y. Yuan, "Internet Worms and Global Routing Instabilities," in Proceedings of SPIE conference, Vol. 4868, July 2002.
14. L. Wang, X. Zhao, D. Pei, R. Bush, D. Massey, A. Mankin, S. F. Wu, and L. Zhang, "Observation and Analysis of BGP Behavior under Stress," in Proceedings of ACM SIGCOMM Internet Measurement Workshop, Nov. 2002.
15. V. Gill, J. Heasley, and D. Meyer, "The BGP TTL Security Hack (BTSH)," Presentation at NANOG-27 meeting, Oct. 2002.
16. A. Heffernan, Protection of BGP Sessions via the TCP MD5 Signature Option, Aug. 1998, IETF RFC 2385.
17. S. Kent, C. Lynn, and K. Seo, "Secure Border Gateway Protocol (S-BGP)," IEEE Journal on Selected Areas in Commmunications, vol. 18, no. 4, pp. 582-592, Apr. 2000.
18. S. Kent, C. Lynn, J. Mikkelson, and K. Seo, "Secure Border Gateway Protocol (S-BGP) - Real World Performance and Deployment Issues," in Proceedings of Symposium on Network and Distributed Systems Security, Feb. 2000.
19. C. Labovitz, R. Wattenhofer, S. Venkatachary, and A. Ahuja, "The Impact of Internet Policy and Topology on Delayed Routing Convergence," in Proceedings of IEEE INFOCOM, 2001.
20. D. Meyer and A. Partan, "BGP Security, Availability, and Operator Needs," Presentation at NANOG-28 meeting, June 2003.
21. T. Tauber and R. White, Routing Protocol Security Requirements, Mar. 2004, RPSEC IETF working group.
22. S. Murphy, BGP Security Vulnerabilities Analysis, June 2003, IETF Internet Draft (draft-ietf-idr-bgp-vuln-00.txt).
23. R. White, "Securing BGP: soBGP," ftp-eng.cisco.com/sobgp/index. html, Sept. 2003.
24. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. F. Wu, and L. Zhang, "Detection of Invalid Routing Announcement in the Internet," in Proceedings of International Conference on Dependable Systems and Networks (DSN), June 2002.
25. G. Goodell, W. Aiello, T. Griffin, J. Ioannidis, P. McDaniel, and A. Rubin, "Working Around BGP: An Incremental Approach to Improving Security and Accuracy of Interdomain Routing," in Proceedings of Symposium on Network and Distributed Systems Security, Feb. 2003.
26. A. Chakrabarti and G. Manimaran, "An Efficient Algorithm for Malicious Update Detection and Recovery in Distance Vector Protocols," in Proceedings of IEEE International Conference on Communications (ICC), May 1997.
27. B. R. Smith, S. Murthy, and J. Garcia-Luna-Aceves, "Securing Distance-Vector Routing Protocols," in Proceedings of Symposium on Network and Distributed Systems Security, Feb. 1997.
28. B. R. Smith and J. Garcia-Luna-Aceves, "Efficient Security Mechanisms for the Border Gateway Routing Protocol," Computer Communications Journal, vol. 21, no. 3, pp. 203-210, 1998.
29. Y.-C. Hu, A. Perrig, and D. B. Johnson, "Efficient Security Mechanisms for Routing Protocols," in Proceedings of Symposium on Network and Distributed Systems Security, Feb. 2003.
30. V. Padmanabhan and D. R. Simon, "Secure Traceroute to Detect Faulty or Malicious Routing," in Proceedings of Hot Topics in Networks (HotNets) Workshop, Oct. 2002.
31. L. Subramanian, V. Roth, I. Stoica, S. Shenker, and R. H. Katz, "Listen and Whisper: Security Mechanisms for BGP," in Proceedings of Networked Systems Design and Implementation (NSDI), Mar. 2004.
32. D. Zhu, M. Gritter, and D. R. Cheriton, "Feedback Based Routing," in Proceedings of Hot Topics in Networks (HotNets) Workshop, Oct. 2002.