Analysis of BGP Update Surge during Slammer Worm Attack

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2918, Issue , 2004, Pages 66-79

  Lad, Mohit ^a,b   Zhao, Xiaoliang ^a   Zhang, Beichuan ^a   Massey, Dan ^a,b   Zhang, Lixia ^a,b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DAMPING; DISTRIBUTED COMPUTER SYSTEMS; INTERNET; NETWORK ROUTING;

DYNAMIC ENVIRONMENTS; LOCAL CONNECTIVITY; MONITORING POINTS; PARTIAL DEPLOYMENT; RESEARCH CHALLENGES; ROUTE FLAP DAMPING; ROUTING PERFORMANCE; TOPOLOGICAL CONDITIONS;

ROUTING PROTOCOLS;

EID: 35048869095     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: None     Document Type: Article

References (19)

1. CERT Advisory CA-2003-04, "SQL Slammer," http://www.cert.org/ advisories/CA-2003-04.html.
2. David Moore et. al., "The spread of the Sapphire/Slammer worm," http://www.cs.berkeley.edu/ nweaver/sapphire/.
3. Internet Health Report, "Sapphire Worm Attack," http://www.digitaloffense.net/worms/mssql_udp_worm/internet_health.jpg.
4. Tim Griffin, "BGP Impact of SQL Worm," http://www.research.att. com/ griffin/bgp_monitor/sql_worm.html.
5. Avi Freedman, "ISP Security Talk, Nanog 2003," http://www.cs.berkeley.edu/ nweaver/sapphire/.
6. Y. Rekhter and T. Li, "A border gateway protocol (BGP-4)," Request for Comment (RFC): 1771, Mar. 1995.
7. CERT Advisory CA-2001-19, ""Code Red" Worm Exploiting Buffer Overflow In IIS Indexing Service DLL," http://www.cert.org/ advisories/CA-2001-19.html.
8. CERT Advisory CA-2001-26, ""Nimda Worm"," http://www.cert.org/advisories/CA-2001-26.html.
9. C. Villamizar, R. Chandra, and R. Govindan, "BGP route flap damping," Request for Comment (RFC): 2439, Nov. 1998.
10. Z. Mao, R. Govindan, G. Varghese, and R. Katz, "Route flap damping exacerbates internet routing convergence," in Proceedings of the ACM SIGCOMM, Pittsburg.PA, Aug. 2002.
11. Univeristy of Oregon, "The Route Views Project," http://www.antc.uoregon.edu/route - views/.
12. L. Wang, X. Zhao, D. Pei, R. Bush, D. Massey, A. Mankin, S. Wu, and L. Zhang, "Observation and analysis of BGP behavior under stress," in Proceedings of the ACM SIGCOMM Internet Measurement Workshop 2002, Nov. 2002.
13. PC World, "Slammer worm slaps Net down but not out," http://www.pcworld.com/news/article/0,aid, 108988,00. asp.
14. X.Zhao, M. Lad, D. Pei, L. Wang, D. Massey, and L. Zhang, "Understanding BGP Behavior through a study of DoD Prefixes," in DISCEX 2003, Feb. 2003.
15. C. Labovitz, A. Ahuja, A. Bose, and F. Jahanian, "Delayed Internet routing convergence," in Proceedings of the ACM SIGCOMM 2000, August/September 2000.
16. Geoff Huston, "Analyzing the Internet BGP Routing Table," The Internet Protocol Journal, March 2001.
17. ssfnet.org, "SSFNET modeling the global internet," http://www.ssfnet.org.
18. B.Premore, "Multi-as topologies from bgp routing tables," http://www.ssfnet.org/Exchange/gallery/asgraph/index.html.
19. J. Cowie, A. Ogielski, B. J. Premore, and Y. Yuan, "Global routing instabilities triggered by Code Red II and Nimda worm attacks," Tech. Rep., Renesys Corporation, Dec 2001.