Analysis of security threats to MPLS virtual private networks

International Journal of Critical Infrastructure Protection

Volumn 2, Issue 4, 2009, Pages 146-153

  Grayson, Denise ^a   Guernsey, Daniel ^a   Butts, Jonathan ^a   Spainhower, Michael ^a   Shenoi, Sujeet ^a  

^a The University of Tulsa Tulsa   (United States)

Author keywords

Multiprotocol label switching; Security analysis; Virtual private networks

Indexed keywords

CLASSES OF SERVICES; DENIAL OF SERVICE ATTACKS; DISPERSED SITES; HIGH-BANDWIDTH APPLICATION; LOW COSTS; MITIGATION STRATEGY; MULTI PROTOCOL LABEL SWITCHING; MULTIPROTOCOLS; NETWORK TECHNOLOGIES; SECURITY ANALYSIS; SECURITY THREATS; SERVICE PROVIDER; VIRTUAL PRIVATE NETWORKS;

BANDWIDTH; COMPUTER ARCHITECTURE; COMPUTER CRIME; LABELS; NETWORK SECURITY; QUALITY OF SERVICE; SECURITY SYSTEMS;

PACKET NETWORKS;

EID: 71649083722     PISSN: 18745482     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijcip.2009.08.002     Document Type: Article

References (15)

1. Davie B., and Rekhter Y. MPLS: Technology and Applications (2000), Morgan Kaufmann, San Francisco, California
2. Gray E. MPLS: Implementing the Technology (2001), Addison-Wesley, Boston, Massachusetts
3. Peterson L., and Davie B. Computer Networks: A Systems Approach (2007), Morgan Kaufmann, San Francisco, California
4. Johnson J. The complete guide to an MPLS migration. Network World 29 March (2007)
5. E. Rosen, Y. Rekhter, RFC 4364: BGP/MPLS IP Virtual Private Networks (VPNs) (www.faqs.org/rfcs/rfc4364.html), 2006
6. M. Behringer, RFC 4381: Analysis of the Security of BGP/MPLS IP Virtual Private Networks (VPNs) (www.faqs.org/rfcs/rfc4381.html), 2006
7. Behringer M., and Morrow M. MPLS VPN Security (2005), Cisco Press, Indianapolis, Indiana
8. E. Rosen, A. Viswanathan, R. Callon, RFC 3031: Multiprotocol Label Switching Architecture (www.faqs.org/rfcs/rfc3031.html), 2001
9. T. Bates, R. Chandra, D. Katz, Y. Rekhter, RFC 4760: Multiprotocol Extensions for BGP-4 (www.faqs.org/rfcs/rfc4760.html), 2007
10. S. Murphy, RFC 4272: BGP Security Vulnerabilities Analysis (www.faqs.org/rfcs/rfc4272.html), 2006
11. Spainhower M., Butts J., Guernsey D., and Shenoi S. Security analysis of RSVP-TE signaling in MPLS networks. International Journal of Critical Infrastructure Protection 1 (2008) 68-74
12. T. Bates, R. Chandra, E. Chen, RFC 2796: BGP Route Reflection-An Alternative to Full Mesh IB (www.faqs.org/rfcs/rfc2796.html), 2000
13. A. Heffernan, RFC 2385: Protection of BGP Sessions via the TCP MD5 Signature Option (www.faqs.org/rfcs/rfc2385.html), 1998
14. B. Boardman, MPLS VPNs: The real deal, Network Computing (www.networkcomputing.com/1312/1312ws1.html), June 10, 2002
15. R. Sinha, MPLS-VPN Services and Security, SANS Information Security Room, SANS Institute, Bethesda, Maryland (www2.sans.org/reading_room/whitepapers/vpns/1124.php), 2003