Fatih: Detecting and isolating malicious routers

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2005, Pages 538-547

  Mizrak, Alper Tugay ^a   Cheng, Yu Chung ^a   Marzullo, Keith ^a   Savage, Stefan ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DATA TRANSPORT; DENIAL-OF-SERVICE; MALICIOUS ROUTERS; NETWORK ROUTERS;

DATA TRANSFER; NETWORK PROTOCOLS; PACKET NETWORKS; ROUTERS; SECURITY OF DATA;

ERROR DETECTION;

EID: 27544472999     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2005.49     Document Type: Conference Paper

References (47)

1. G. Almes, S. Kalidindi, and M. Zekauskas. A one-way packet loss metric for IPPM. RFC 2680, Sept. 1999.
2. X. Ao. Report on DIMACS Workshop on Large-Scale Internet Attacks, Sept. 2003.
3. I. Avramopoulos, H. Kobayashi, R. Wang, and A. Krishnamurthy. Amendment to: Highly secure and efficient routing, Feb. 2004. Amendment.
4. I. Avramopoulos, H. Kobayashi, R. Wang, and A. Krishnamurthy. Highly secure and efficient routing. In Proceedings of INFOCOM 2004 Conference, March 2004.
5. J. Bellardo and S. Savage. Measuring packet reordering. In ACM SIGCOMM Internet Measurement Workshop(IMW02).
6. J. C. R. Bennett, C. Partridge, and N. Shectman. Packet reordering is not pathological network behavior. IEEE/ACM Transactions on Networking (TON), 7(6):789-798, 1999.
7. J. Black, S. Halevi, H. Krawczyk, T. Krovetz, and P. Rogaway. UMAC: Fast and secure message authentication. Lec. Notes in CS, 1666:216-233, 1999.
8. B. H. Bloom. Space/time trade-offs in hash coding with allowable errors. Comm. of the ACM, 13(7):422-426, July '70.
9. K. A. Bradley, S. Cheung, N. Puketza, B. Mukherjee, and R. A. Olsson. Detecting disruptive routers: A distributed network monitoring approach. In Proc. of the IEEE Symposium on Security and Privacy, pages 115-124, May 1998.
10. T. D. Chandra and S. Toueg. Unreliable failure detectors for reliable distributed systems. Journal of the ACM, 43(2):225-267, 1996.
11. K. M. Chandy and L. Lamport. Distributed snapshots: determining global states of distributed systems. ACM Transactions on Computer Systems, 3(1):63-75, 1985.
12. S. Cheung. An efficient message authentication scheme for link state routing. In ACSAC, pages 90-98, 1997.
13. S. Cheung and K. Levitt. Protecting routing infrastructures from denial of service using cooperative intrusion detection. In New Security Paradigms Workshop, 1997.
14. Cisco Systems. Load balancing with Cisco express forwarding, http://www.cisco.com/warp/public/cc/pd/ifaa/pa/much/prodlit/loadb_an.pdf.
15. Y. Cosendai, M. Dacier, and P. Scotton. Intrusion detection mechanism to detect reachability attacks in PNNI networks. In Recent Advances in Intrusion Detection, 1999.
16. N. G. Duffield and M. Grossglauser. Trajectory sampling for direct traffic observation. In SIGCOMM'00, pages 271-282.
17. W. Feghali, B. Burres, G. Wolrich, and D. Carrigan. Security: Adding protection to the network via the network processor. Intel Technology Journal, 06:40-49, Aug. 2002.
18. Gauis. Things to do in Ciscoland when you're dead, Jan. '00.
19. M. T. Goodrich. Efficient and secure network routing algorithms, Jan 2001. Provisional patent filing.
20. A. Herzberg and S. Kutten. Early detection of message forwarding faults. SIAM J. Comput., 30(4): 1169-1196, 2000.
21. K. J. Houle, G. M. Weaver, N. Long, and R. Thomas. Trends in denial of service attack technology. Technical report, CERT Coordination Center, Oct. 2001.
22. Y.-C. Hu, A. Perrig, and D. B. Johnson. Ariadne: A secure on-demand routing protocol for ad hoc networks. In The 8th ACM Int. Conf. on MobiCom, Sep 2002.
23. J. R. Hughes, T. Aura, and M. Bishop. Using conservation of flow as a security mechanism in network protocols. In IEEE Symp. on Security and Privacy, pages 132-131, 2000.
24. Y. Jou, F. Gong, C. Sargor, X. Wu, S. Wu, H. Chang, and F. Wang. Design and implementation of a scalable intrusion detection system for the protection of network infrastructure. In DISCEX'00 Proceedings, volume 2, pages 69-83, 2000.
25. Juniper Networks. JUNOS 6.4 Routing Protocols Configuration Guide. http://www.juniper.net/techpubs/software/junos/junos64/swconfig64-routing/html/.
26. S. Kent, C. Lynn, J. Mikkelson, and K. Seo. Secure Border Gateway Protocol (Secure-BGP). IEEE Journal on Selected Areas in Communications, 18(4):582-592, Apr. 2000.
27. C. Labovitz, A. Ahuja, and M. Bailey. Shining light on dark address space. Technical report. Arbor Networks, Nov. 2001.
28. L. Lamport, R. Shostak, and M. Pease. The Byzantine generals problem. ACM Trans. on Programming Languages and Systems, 4(3):382-401, 1982.
29. Y. Minsky, A. Trachtenberg, and R. Zippel. Set reconciliation with nearly optimal communication complexity. In Int. Symp. on Information Theory, page 232, June 2001.
30. A. T. Mizrak, K. Marzullo, and S. Savage. Detecting malicious routers. Technical Report CS2004-0789, UCSD, 2004.
31. A. Morton, L. Ciavattone, G. Ramachandran, S. Shalunov, and J. Perser. Packet reordering metric for IPPM, Mar. 2003.
32. J. T. Moy. Multicast extensions to OSPF. RFC 1584, IETF, Mar. 1994.
33. National Institute of Standards and Technology. Data encryption standard. FIPS PUBS 46-3, Oct. 1999.
34. National Institute of Standards and Technology. Advanced encryption standard. FIPS PUBS 197, Nov. 2001.
35. V. N. Padmanabhan and D. Simon. Secure traceroute to detect faulty or malicious routing. SIGCOMM Comp. Comm. Review, 33(1):77-82, 2003.
36. R. Perlman. Network Layer Protocols with Byzantine Robustness. PhD thesis, MIT LCS TR-429, Oct. 1988.
37. R. Perlman. Interconnections: Bridges and Routers. Addison Wesley Longman Publishing Co. Inc., 1992.
38. D. Pullin, A. Corlett, B. Mandeville, and S. Critchley. Packet reordering: The minimal longest ascending subsequence metric, Feb. 2002.
39. P. Rogaway. UMAC Performance (more). www.cs.ucdavis.edu/rogaway/umac/ 2000/perf00bis.html.
40. N. Shah. Understanding network processors. Master's thesis, University of California, Berkeley, September 2001.
41. C. Shannon, D. Moore, and K. C. Claffy. Beyond folklore: observations on fragmented traffic. IEEE/ACM Trans. Netw., 10(6):709-720, 2002.
42. B. R. Smith and J. Garcia-Luna-Aceves. Securing the border gateway routing protocol. In Proc. Global Internet'96.
43. N. Spring, R. Mahajan, and D. Wetherall. Measuring ISP topologies with Rocketfuel. In Proc. of ACM/SIGCOMM, pages 133-145, 2002.
44. L. Subramanian, V. Roth, I. Stoica, S. Shenker, and R. Katz. Listen and Whisper: Security Mechanisms for BGP. In Proc. of NSDI, Mar. 2004.
45. D. Taylor. Using a compromised router to capture network traffic, July 2002. Unpublished Technical Report.
46. R. Teixeira, K. Marzullo, S. Savage, and G. M. Voelker. In search of path diversity in ISP networks. In Proc. of the ACM/SIGCOMM IMC, pages 313-318, 2003.
47. R. Thomas. ISP Security BOF, NANOG 28, June 2003.