SNAPP: Stateless network-authenticated path pinning

Proceedings of the 2008 ACM Symposium on Information, Computer and Communications Security, ASIACCS '08

Volumn , Issue , 2008, Pages 168-178

  Parno, Bryan ^a   Perrig, Adrian ^a   Andersen, Dave ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Next generation networks; Path pinning

Indexed keywords

ARCHITECTURAL BUILDINGS; BUILDING BLOCKES; MALICIOUS ATTACK; MISCONFIGURATIONS; NETWORK ARCHITECTS; NEW DESIGN; NEXT GENERATION NETWORK; PACKET HEADER; PATH EMBEDDING; ROUTE LOOKUP; ROUTING DECISIONS; SENDER ANONYMITY;

NETWORK SECURITY;

EID: 77952410514     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1368310.1368336     Document Type: Conference Paper

References (32)

1. W. Adjie-Winoto, E. Schwartz, H. Balakrishnan, and J. Lilley. The design and implementation of an intentional naming system. In Proc. ACM SOSP, 1999.
2. D. G. Andersen, H. Balakrishnan, M. F. Kaashoek, and R. Morris. Resilient Overlay Networks. In Proc. ACM SOSP, 2001.
3. T. Anderson, T. Roscoe, and D. Wetherall. Preventing Internet denial-of-service with capabilities. In Proceedings of Hotnets-II, Nov. 2003.
4. K. Argyraki and D. R. Cheriton. Loose source routing as a mechanism for traffic policies. In ACM SIGCOMM Workshop on Future Directions in Network Architecture, Sept. 2004.
5. D. Awduche, L. Berger, D. Gan, T. Li, V. Srinivasan, and G. Swallow. RSVP-TE: Extensions to RSVP for LSP Tunnels. Internet Engineering Task Force, Dec. 2001. RFC 3209.
6. M. Bellare and C. Namprempre. Authenticated encryption: Relations among notions and analysis of the generic composition paradigm. Proceedings of AsiaCrypt, 2000.
7. J. Black and P. Rogaway. A block-cipher mode of operation for parallelizable message authentication. In Advances in Cryptology - EUROCRYPT. Springer-Verlag, 2002.
8. V. J. Bono. 7007 explanation and apology. http://www.merit.edu/mail. archives/nanog/1997-04/msg00444.html, Apr. 1997.
9. R. Braden, L. Zhang, S. Berson, S. Herzog, and S. Jamin. Resource ReSerVation Protocol (RSVP). IETF, 1997. RFC 2205.
10. G. P. Chandranmenon and G. Varghese. Trading packet headers for packet processing. IEEE/ACM Trans. Netw., 4 (2):141-152, 1996.
11. D. Chaum. The dining cryptographers problem: Unconditional sender and recipient untraceability. Jrnl of Cryptology, I (1), 1998.
12. B. Fortz and M. Thorup. Optimizing OSPF/IS-IS weights in a changing world. IEEE J-SAC, 20 (4):756-767, May 2002.
13. Helion Technology Limited. High performance AES (Rijndael) cores for ASIC. Cambridge, England. Available at http://www.heliontech.com/. March 2007.
14. J. Jannotti. Network layer support for overlay networks. In Proc. 5th International Conference on Open Architectures and Network Programming (OPENARCH), New York, NY, June 2002.
15. S. Kandula, D. Katabi, B. Davie, and A. Charny. Walking the tightrope: Responsive yet stable traffic engineering. In Proc. ACM SIGCOMM, Philadelphia, PA, Aug. 2005.
16. L. Li, D. Alderson, W. Willinger, J. Doyle, R. Tanaka, and S. Low. A first principles approach to understanding the Internet's router technology. In Proceedings of ACM SIGCOMM, 2004.
17. S. Machiraju, M. Seshadri, and I. Stoica. A scalable and robust solution for bandwidth allocation. Technical Report UCB//CSD02-1176, University of California at Berkeley, 2002.
18. NSF workshop report. Overcoming barriers to disruptive innovation in networking, Jan. 2005.
19. B. Parno, D. Wendlandt, E. Shi, A. Perrig, B. Maggs, and Y.-C. Hu. Portcullis: Protecting connection setup from denial-of-capability attacks. In Proceedings of the ACM SIGCOMM, Aug. 2007.
20. B. Raghavan and A. C. Snoeren. A system for authenticated policy-compliant routing. In Proc. of ACM SIGCOMM, 2004.
21. M. Reiter and A. Rubin. Crowds: Anonymity for web transactions. ACM TISSEC, 1:66-92, Nov. 1998.
22. E. Rosen, A. Viswanathan, and R. Callon. Multiprotocol label switching architecture. RFC 3031, Jan. 2001.
23. S. Sinha, S. Kandula, and D. Katabi. Harnessing TCP's burstiness with flowlet switching. In Proc. 3rd ACM Workshop on Hot Topics in Networks (Hotnets-III), San Diego, CA, Nov. 2004.
24. I. Stoica, D. Adkins, S. Zhaung, S. Shenker, and S. Surana. Internet indirection infrastructure. In Proc. ACM SIGCOMM, Aug. 2002.
25. I. Stoica and H. Zhang. Lira: An approach for service differentiation in the internet. In Proceedings of NOSSDAV, June 1998.
26. P. F. Syverson, D. M. Goldschlag, and M. G. Reed. Anonymous connections and onion routing. In Proc. IEEE Symposium on Security and Privacy, Oakland, CA, 1997.
27. J. Touch and S. Hotz. The X-Bone. In Proc. 3rd Global Internet Mini-Conference in conjunction with IEEE Globecom, 1998.
28. A. Yaar, A. Perrig, and D. Song. SIFF: An endhost capability mechanism to mitigate DDoS flooding attacks. In Proceedings of IEEE Symposium on Security and Privacy, May 2004.
29. X. Yang. NIRA: A New Internet Routing Architecture. PhD thesis, MIT, Sept. 2004.
30. X. Yang, D. Wetherall, and T. Anderson. A DoS-limiting network architecture. In Proceedings of ACM SIGCOMM, Aug. 2005.
31. M. Zhang, B. Karp, S. Floyd, and L. Peterson. A reordering-robust TCP with DSACK. In IEEE ICNP, 2003.
32. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. F. Wu, and L. Zhang. An analysis of BGP Multiple Origin AS (MOAS) conflicts. In Proc. of Internet Measurement Workshop, 2001.