Network fault localization with small TCB

Proceedings - International Conference on Network Protocols, ICNP

Volumn , Issue , 2011, Pages 143-154

  Zhang, Xin ^a   Zhou, Zongwei ^a   Hasker, Geoff ^a   Perrig, Adrian ^a   Gligor, Virgil ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CURRENT LIMITS; ENTERPRISE NETWORKS; FAULT LOCALIZATION; LOWER BOUNDS; NETWORK AVAILABILITY; NETWORK DATA; NETWORK FAULTS; NETWORK INFRASTRUCTURE; NETWORK NODE; SECURE NETWORK PROTOCOLS; TRUST RELATIONSHIP; TRUSTED COMPUTING; TRUSTED COMPUTING BASE; TRUSTED COMPUTING TECHNOLOGY;

NETWORK LAYERS; NETWORK SECURITY; ROUTERS;

NETWORK PROTOCOLS;

EID: 84055200941     PISSN: 10921648     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNP.2011.6089046     Document Type: Conference Paper

References (47)

1. Arbor networks: worldwide security survey 2010. http://www. arbornetworks.com/sp security report.php.
2. Cisco security hole a whopper. http://www.wired.com/politics/security/ news/2005/07/68328.
3. Netperf benchmark. http://www.netperf.org/netperf/.
4. Symantec warns of router compromise. http://www.routersusa.com/symantec- warns-of-router-compromise-2.html.
5. Advanced Micro Devices. AMD 64 architecture programmer's manual: Volume 2: System programming. AMD Publication no. 24593 rev. 3.14, Sept. 2007.
6. X. Ao. Report on dimacs workshop on large-scale internet attacks. http://dimacs.rutgers.edu/Workshops/Attacks/internet-attack-9-03.pdf.
7. K. Argyraki, P. Maniatis, O. Irzak, S. Ashish, and S. Shenker. Loss and delay accountability for the internet. In IEEE International Conference on Network Protocols (ICNP), 2007.
8. I. Avramopoulos, H. Kobayashi, R.Wang, and A. Krishnamurthy. Highly secure and efficient routing. In IEEE Infocom, 2004.
9. B. Awerbuch, R. Curtmola, D. Holmer, C. Nita-Rotaru, and H. Rubens. ODSBR: An on-demand secure byzantine resilient routing protocol for wireless ad hoc networks. ACM Trans Inform. Syst. Secur, 2008.
10. B. Awerbuch, D. Holmer, C. Nita-Rotaru, and H. Rubens. An on-demand secure routing protocol resilient to byzantine failures. In ACM WiSe, 2002.
11. J. Aweya. IP router architecture: An overview. International Journal of Communication Systems, 14(5):447-475, June 2001.
12. B. Barak, S. Goldberg, and D. Xiao. Protocols and lower bounds for failure localization in the internet. In Proceedings of EUROCRYPT, 2008.
13. M. Bellare, R. Guerin, and P. Rogaway. XOR MACs: New methods for message authentication using finite pseudorandom functions. In CRYPTO '95, pages 15-28. Springer-Verlag, 1995.
14. J. Black and P. Rogaway. A block-cipher mode of operation for parallelizable message authentication(PMAC). In EUROCRYPT '02, volume LNCS 2322, pages 384-397. Springer-Verlag, 2002.
15. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. Mckeown, and S. Shenker. Ethane: Taking control of the enterprise. In SIGCOMM, 2007.
16. M. Casado, T. Garfinkel, A. Akella, M. J. Freedman, D. Boneh, N. Mckeown, and S. Shenker. Sane: A protection architecture for enterprise networks. In USENIX Security, 2006.
17. S. Chaki, E. Clarke, A. Groce, S. Jha, and H. Veith. Modular verification of software components in C. In IEEE Transactions on Software Engineering, 2004.
18. V. D. Gligor and P. Donescu. Fast encryption and authentication: XCBC encryption and XECB authentication modes. In Fast Software Encryption '01, volume LNCS 2355, pages 92-108. Springer-Verlag, 2001.
19. S. Goldberg, D. Xiao, E. Tromer, B. Barak, and J. Rexford. Path-quality monitoring in the presence of adversaries. In Proceedings of SIGMETRICS, 2008.
20. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang. A clean slate 4D approach to network control and management. In ACM SIGCOMM CCR, 2005.
21. T. C. Group. TPM specification version 1.2, 2009.
22. R. Gummadi, H. Balakrishnan, P. Maniatis, and S. Ratnasamy. Not-a-bot: Improving service availability in the face of botnet attacks. In Usenix NSDI, 2009.
23. K. J. Houle, G. M. Weaver, N. Long, and R. Thomas. Trends in denial of service attack technology. Technical report, CERT Coordination Center.
24. J. R. Hughes, T. Aura, and M. Bishop. Using conservation of flow as a security mechanism in network protocols. In IEEE Symposium on Security and Privacy, 2000.
25. Intel Corportation. Intel trusted execution techonology - software development guide. Document number 315168-005, June 2008.
26. Intel Mobility Group, Israel Development Center, Israel. Intel advanced encryption standard (aes) instructions set, Jan. 2010. http://software.intel. com/en-us/articles/intel-advanced-encryption-standard-aes-instructions-set/.
27. E. Kohler, R. Morris, B. Chen, J. Jannotti, and M. F. Kaashoek. The Click modular router. ACM Transactions on Computer Systems, 2000.
28. C. Labovitz, A. Ahuja, and M. Bailey. Shining light on dark address space. Technical report, Arbor Networks.
29. F. Le, G. G. Xie, and H. Zhang. Theory and new primitives for safely connecting routing protocol instances. In ACM SIGCOMM, 2010.
30. K. Liu, J. Deng, P. K. Varshney, and K. Balakrishnan. An acknowledgement-based approach for the detection of routing misbehavior in MANETs. IEEE Transactions on Mobile Computing, May 2007.
31. Y. Lu, G. Shou, Y. Hu, and Z. Guo. The research and efficient fpga implementation of ghash core for gmac. In International Conference on E-Business and Information System Security, pages 1-5, 2009.
32. J. M. McCune, Y. Li, N. Qu, Z. Zhou, A. Datta, V. Gligor, and A. Perrig. TrustVisor: Efficient TCB reduction and attestation. In Proceedings of the IEEE Symposium on Security and Privacy, May 2010.
33. J. M. McCune, B. Parno, A. Perrig, M. K. Reiter, and A. Seshadri. Minimal TCB code execution (extended abstract). In Proceedings of the IEEE Symposium on Security and Privacy, May 2007.
34. A. T. Mizrak, Y. chung Cheng, K. Marzullo, and S. Savage. Fatih: Detecting and isolating malicious routers. In IEEE Transactions on Dependable and Secure Computing, 2005.
35. V. N. Padmanabhan and D. R. Simon. Secure traceroute to detect faulty or malicious routing. SIGCOMM Computer Communication Review (CCR), 33(1):77-82, 2003.
36. B. Parno, J. M. McCune, and A. Perrig. Bootstrapping trust in commodity computers. In Proceedings of the IEEE Symposium on Security and Privacy, May 2010.
37. S. Saroiu and A. Wolman. I am a sensor, and i approve this message. In HotMobile, 2010.
38. A. Satoh, T. Sugawara, and T. Aoki. High-performance hardware architecture for galois counter mode. IEEE Transactions on Computers, 58(7):917-930, 2009.
39. E. Shi, A. Perrig, and L. V. Doorn. BIND: A time-of-use attestation service for secure distributed systems. In Proceedings of IEEE Symposium on Security and Privacy, May 2005.
40. N. Spring, R. Mahajan, and D. Wetherall. Measuring isp topologies with rocketfuel. In ACM SIGCOMM, 2002.
41. H. Technology. Aes based authentication cores. http://www.heliontech. com/aes auth.htm.
42. R. Thomas. Isp security bof, nanog 28. http://www.nanog.org/mtg-0306/pdf/ thomas.pdf.
43. A. Yaar, A. Perrig, and D. Song. Siff: A stateless internet flow filter to mitigate ddos flooding attacks. In IEEE Symposium on Security and Privacy, 2004.
44. B. Yang, R. Karri, and D. A. McGrew. A high-speed hardware architecture for universal message authentication code. IEEE Journal on Selected Areas in Communications, 24(10):1831-1839, 2006. (Pubitemid 44559597)
45. X. Yang, D. Wetherall, and T. Anderson. Tva: A dos-limiting network architecture. In IEEE/ACM Transactions on Networking, to appear.
46. X. Zhang, H.-C. Hsiao, G. Hasker, H. Chan, A. Perrig, and D. G. Andersen. SCION: Scalability, control, and isolation on next-generation networks. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland), May 2011.
47. X. Zhang, A. Jain, and A. Perrig. Packet-dropping adversary identification for data plane security. In Proceedings of ACM CoNext, 2008.