Efficient techniques for detecting false origin advertisements in inter-domain routing

2nd Workshop on Secure Network Protocols, NPSec

Volumn , Issue , 2006, Pages 12-19

  Qiu, Sophie Y ^a   Monrose, Fabian ^a   Terzis, Andreas ^a   McDaniel, Patrick D ^b  

^a JOHNS HOPKINS UNIVERSITY   (United States)

^b PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BORDER GATEWAY PROTOCOL (BGP); DETECTION RATES; FORGERY ATTACKS; INTER-DOMAIN ROUTING; INTERNET TOPOLOGIES; NODE SELECTION; SECURE NETWORK PROTOCOLS;

INFORMATION DISSEMINATION; INTERNET; INTERNET PROTOCOLS; MECHANISMS; NETWORK PROTOCOLS;

GATEWAYS (COMPUTER NETWORKS);

EID: 38549165399     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NPSEC.2006.320341     Document Type: Conference Paper

References (22)

1. Y. Rekhter and T. Li, "A Border Gateway Protocol (BGP-4)," RFC 1771, 1995.
2. R. Mahajan, D. Wetherall, and T. Anderson, "Understanding BGP misconfiguration," in Proc. of SIGCOMM pp. 3-16, 2002.
3. O. Nordstrom and C. Dovrolis, "Beware of BGP attacks," ACM SigcommComputer Communications Review, vol. 34, pp. 1-8, April 2004.
4. S. Kent, C. Lynn, and K. Seo, "Secure Border Gateway Protocol (Secure-BGP)," IEEE Journal on Selected Areas in Communications, vol. 18, pp. 582-592, April 2000.
5. J. Ng, "Extensions to BGP to support secure origin BGP (draft)," in Network Working Group, 2003.
6. W. Aiello, J. Ioannidis, and P. McDaniel, "Origin authentication in Inter-domain routing," in Proc. of ACM Conference on Computer and Communications Security, pp. 165-178, 2003.
7. Y. Hu, A. Perrig, and M. Sirbu, "SPV: Secure path vector routing for securing BGP," in Proc. of SIGCOMM pp. 179-192, 2004.
8. L. Gao, "On inferring autonomous system relationships in the Internet," IEEE/ACM Trans, on Networking, vol. 9, no. 6, pp. 733-745, 2000.
9. University of Oregon Route Mew Project, http://routeviews.org
10. L. Subramanian, S. Agarwal, J. Rexford, and R. H. Katz, "Characterizing the Internet hierarchy from multiple vantage points," in Proc. of INFOCOM, pp. 618-627, 2002.
11. S. Qiu, P. McDaniel, F. Monrose, and A. Rubin, "Characterizing address use structure and stability of origin advertisement in Inter-domain routing," in Proc. of IEEE Symposium on Computers and Communications, pp. 489-496, 2006.
12. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. Wu, and L. Zhang, "An analysis of BGP multiple origin AS (MOAS) conflicts," in Proc. of Internet Measurement Workshop, pp. 31-35, 2001.
13. J. Karlin, S. Forrest, and J. Rexford, "Pretty good BGP: Protecting BGP by cautiously selecting routes," in Proc. of IEEE International Conference on Network Protocols, (to appear) 2006.
14. S. Murphy, "BGP security vulnerabilities analysis," in Internet Research Task Force, 2002.
15. J. Hawkinson and T. Bates, "Guidelines for creation, selection, and registration of an autonomous system (AS)," RFC 1930, 1996.
16. Multi-origin Prefixes http://bgp.potaroo.net/as6447/bgp- multi-orgas.txt
17. G. Goodell, W. Aiello, T. Griffin, J. Ioannidis, P. McDaniel, and A. Rubin, "Working around BGP: An incremental approach to improving security and accuracy in Inter-domain routing," in Proc. of Network and Distributed System Security Symposium, pp. 75-85, 2003.
18. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. Wu, and L. Zhang, "Detection of invalid routing announcement in the Internet," in Proc. of Dependable Systemsand Networks, pp. 59-68, 2002.
19. C. Kruegel, D. Mutz, W. Robertson, and F. Valeur, "Topology-based detection of anomalous BGP messages," in Proc. of International Symposiumon Recent Advances in Intrusion Detection, pp. 17-35, 2003.
20. L. Subramanian, V Roth, I. Stoica, S. Shenker, and R. Katz, "Listen and Whisper: Security mechanisms for BGP," in Proc. of Network Systems Design and Implementation, pp. 127-140, 2004.
21. M. Lad, D. Massey, D. Pei, Y. Wu, B. Zhang, and L. Zhang, "PHAS: A prefix hijack alert system," in Proc. of USENIX Security, pp. 153-166, 2006.
22. K. Seo, C. Lynn, and S. Kent, "Public-Key Infrastructure for the Secure Border Gateway Protocol (S-BGP)," in Proc. of DARPA Information Survivability Conf and Exposition II, pp. 239-253, June 2001.