Topology-based detection of anomalous-BGP messages

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2820, Issue , 2003, Pages 17-35

  Kruegel, Christopher ^a   Mutz, Darren ^a   Robertson, William ^a   Valeur, Fredrik ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

BGP; Network Security; Routing Security

Indexed keywords

DENIAL-OF-SERVICE ATTACK; ELECTRIC NETWORK TOPOLOGY; INTERNET PROTOCOLS; INTRUSION DETECTION; NETWORK SECURITY; ROUTERS; TOPOLOGY;

BGP; BORDER GATEWAY PROTOCOL; CRYPTOGRAPHIC OPERATIONS; FUNDAMENTAL COMPONENT; INTERDOMAIN ROUTING; INTERNET INFRASTRUCTURE; MAN IN THE MIDDLE ATTACKS; ROUTING SECURITY;

GATEWAYS (COMPUTER NETWORKS);

EID: 35248861643     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-45248-5_2     Document Type: Article

References (35)

1. Asia Pacific Network Information Centre. http://http://www.apnic.net.
2. American Registry for Internet Numbers. http://http://www.arin.net.
3. R. Chandra, P. Traina, and T. Li. BGP Communities Attribute. IETF-RFC 1997, Aug 1996.
4. S. Cheung. An Efficient Message Authentication Scheme for Link State Routing. In 13th Annual Computer Security Applications Conference, December 1997.
5. S. Convey, D. Cook, and M. Franz. An Attack Tree for the Border Gateway Protocol. IETF Internet Draft, Oct 2002.
6. M. Faloutsos, P. Faloutsos, and C. Faloutsos. On Power-Law Relationships of the Internet Topology. In Proceedings of ACM SIGCOMM, 1999.
7. J. Farrar. Cable and Wireless Routing Instability, http://www.merit.edu/mail. archives/nanog/2001-04/msg00209.html.
8. L. Gao. On Inferring Autonomous System Relationships in the Internet. In Proceedings of IEEE Global Internet, November 2000.
9. Geoffrey Goodell, William Aiello, Timothy Griffin, John Ioannidis, Patrick McDaniel, and Aviel Rubin. Working Around BGP: An Incremental Approach to Improving Security and Accuracy of Interdomain Routing. In Network and Distributed Systems Security, 2003.
10. R. Govindan and A. Reddy. An Analysis of Internet Inter-Domain Topology and Route Stability. In IEEE InfoCom, 1997.
11. B. Huffaker, A. Broido, k. claffy, M. Fomenkov, K. Keys, E. Lagache, and D. Moore. Skitter AS Internet Graph. CAIDA, Oct 2000.
12. Y.F. Jou, F. Gong, C. Sargor, X. Wu, F. Wu, H.C. Chang, and F. Wang. Design and Implementation of a Scalable Intrusion Detection System for the Protection of Network Infrastructure. In DARPA Information Survivability Conference and Exposition, January 2000.
13. S. Kent, C. Lynn, J. Mikkelson, and K. Seo. Secure Border Gateway Protocol (Secure-BGP) - Real World Performance and Deployment Issues. In Proceedings of the Symposium on Network and Distributed System Security, February 2000.
14. S. Kent, C. Lynn, and K. Seo. Secure Border Gateway Protocol (Secure-BGP). IEEE Journal on Selected Areas in Communications, 18(4):582-592, April 2000.
15. C. Labovitz, A. Ahuja, and F. Jahanian. Experimental Study of Internet Stability and Wide-Area Network Failures. In Fault-Tolerant Computing Symposium, June 1999.
16. C. Labovitz, G. R. Malan, and F. Jahanian. Origins of Internet Routing Instability. In IEEE INFOCOM, March 1998.
17. The Latin American and Caribbean Internet Addresses Registry. http://http: //wwv.lacnic.net.
18. R. Mahajan, D. Wetherall, and T. Anderson. Understanding BGP Misconfiguration. In Proceedings of ACM SIGCOMM, August 2002.
19. G. Malkin. RIP Version 2. IETF-RFC 2453, Nov 1998.
20. Sean McCreary and Bill Woodcock. PCH RouteViews archive, http://www.pch. net/resources/data/routing-tables.
21. V. Mittal and G. Vigna. Sensor-Based Intrusion Detection for Intra-Domain Distance-Vector Routing. In Proceedings of the ACM Conference on Computer and Communication Security (COS'02), Washington, DC, November 2002. ACM Press.
22. J. Moy. OSPF Version 2. IETF-RFC 2328, Apr 1998.
23. Sandra Murphy. Border Gateway Protocol Security Analysis. IETF Internet Draft, Nov 2001.
24. S.L. Murphy and M.R. Badger. Digital Signature Protection of the OSPF Routing Protocol. In Proceedings of the Symposium on Network and Distributed System Security, February 1996.
25. The North American Network Operators' Group, http://www.nanog.org.
26. D. Qu, B.M. Vetter, F. Wang, R. Narayan, F. Wu, F. Jou, F. Gong, and C. Sargor. Statistical Anomaly Detection for Link-State Routing Protocols. In In Proceedings of the 1998 International Conference on Network Protocols, October 1998.
27. A. Przygienda R. Hauser and G. Tsudik. Reducing the cost of security in link state routing. In ISOC Symposium on Network and Distributed System Security, February 1997.
28. Y. Rekhter and T. Li. A Border Gateway Protocol 4 (BGP-4). IETF-RFC 1654, Mar 1995.
29. Routing Arbiter Project. http://www.ra.net.
30. B.R. Smith, S. Murthy, and J.J. Garcia-Luna-Aceves. Securing Distance-Vector Routing Protocols. In Proceedings of the Symposium on Network and Distributed System Security, February 1997.
31. L. Subramanian, S. Agarwal, J. Rexford, and R. H. Katz. Characterizing the Internet Hierarchy From Multiple Vantage Points. In IEEE INFOCOM, 2002.
32. University of Oregon - Looking Glass, http://antc.uoregon.edu/route-views.
33. E. Zegura, K. Calvert, and M. Donahoo. A quantitative comparison of graph-based models for internetworks. IEEE/ACM Transactions on Networking, 5(6):770-783, December 1997.
34. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. F. Wu, and L. Zhang. An Analysis of BGP Multiple Origin AS (MOAS) Conflict. In ACM SIGCOMM Internet Measurement Workshop, San Francisco, USA, November 2001.
35. X. Zhao, D. Pei, L. Wang, L. Zhang, D. Massey, A. Mankin, and S. F. Wu. Detection of Invalid Route Announcement in the Internet. In International Conference on Dependable Systems and Networks, 2002.