Secure and scalable fault localization under dynamic traffic patterns

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2012, Pages 317-331

  Zhang, Xin ^a   Lan, Chang ^b   Perrig, Adrian ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b TSINGHUA UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY;

DATA PLANES; DATA-PLANE; DYNAMIC TRAFFIC PATTERNS; ENTERPRISE NETWORKS; FAULT LOCALIZATION; FAULTY LINKS; LOCALIZATION PROTOCOLS; PACKET FORWARDING; PATH-BASED; SOURCE NODES;

ROUTERS;

EID: 84878355953     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2012.27     Document Type: Conference Paper

References (37)

1. Arbor networks: Infrastructure security survey. http://www.arbornetworks. com/sp-security-report.php.
2. Cisco security hole a whopper. http://www.wired.com/politics/security/ news/2005/07/68328.
3. Symantec warns of router compromise. http://www.routersusa.com/symantec- warns-of-router-compromise-2.html.
4. This project has benefited from the use of measurement data collected on the internet2 network as part of the internet2 observatory project. http://netflow.internet2.edu/.
5. D. Achlioptas. Database-friendly random projections. In Proceedings of PODS.
6. N. Alon, Y. Matias, and M. Szegedy. The space complexity of approximating the frequency moments. STOC, 1996.
7. X. Ao. Report on dimacs workshop on large-scale internet attacks. http://dimacs.rutgers.edu/Workshops/Attacks/internet-attack-9-03.pdf.
8. K. Argyraki, P. Maniatis, O. Irzak, S. Ashish, and S. Shenker. Loss and delay accountability for the Internet. In IEEE ICNP, 2007.
9. K. Argyraki, P. Maniatis, and A. Singla. Verifiable network-performance measurements. In ACM CoNext, 2010.
10. B. Augustin, T. Friedman, and R. Teixeira. Measuring load-balanced paths in the internet. In ACM IMC, 2007.
11. I. Avramopoulos, H. Kobayashi, R. Wang, and A. Krishnamurthy. Highly secure and efficient routing. In IEEE Infocom, 2004.
12. B. Awerbuch, R. Curtmola, D. Holmer, C. Nita-Rotaru, and H. Rubens. ODSBR: An on-demand secure byzantine resilient routing protocol for wireless ad hoc networks. ACM Trans Inform. Syst. Secur, 2008.
13. B. Awerbuch, D. Holmer, C. Nita-Rotaru, and H. Rubens. An on-demand secure routing protocol resilient to byzantine failures. In ACM WiSe, 2002.
14. B. Barak, S. Goldberg, and D. Xiao. Protocols and lower bounds for failure localization in the Internet. In EUROCRYPT, 2008.
15. B. H. Bloom. Space/time trade-offs in hash coding with allowable errors. Commun. ACM, 13(7):422-426, 1970.
16. K. A. Bradley, S. Cheung, N. Puketza, B. Mukherjee, and R. A. Olsson. Detecting disruptive routers: A distributed network monitoring approach. In IEEE Symposium on Security and Privacy, May 1998.
17. M. Charikar, K. Chen, and M. Farach-Colton. Finding frequent items in data streams. Theoretical Computer Science, 2004.
18. I. Cunha, R. Teixeira, and C. Diot. Measuring and characterizing end-to-end route dynamics in the presence of load balancing. In PAM, 2011.
19. S. Goldberg, D. Xiao, E. Tromer, B. Barak, and J. Rexford. Path-quality monitoring in the presence of adversaries. In Proceedings of SIGMETRICS, 2008.
20. A. Greenberg, N. Jain, S. Kandula, C. Kim, P. Lahiri, D. Maltz, P. Patel, and S. Sengupta. VL2: A scalable and flexible data center network. In ACM SIGCOMM, 2009.
21. K. J. Houle, G. M. Weaver, N. Long, and R. Thomas. Trends in denial of service attack technology. Technical report, CERT Coordination Center.
22. J. R. Hughes, T. Aura, and M. Bishop. Using conservation of flow as a security mechanism in network protocols. In IEEE Symposium on Security and Privacy, 2000.
23. J.Eidson and K. Lee. IEEE 1588 standard for a precision clock synchronization protocol for networked measurement and control systems. In Sensors for Industry Conference, 2nd ISA/IEEE., 2002.
24. M. Kodialam, T. V. Lakshman, and S. Sengupta. Efficient and robust routing of highly variable traffic. In In Proceedings of ACM HotNets, 2004.
25. C. Labovitz, A. Ahuja, and M. Bailey. Shining light on dark address space. Technical report, Arbor Networks.
26. K. Liu, J. Deng, P. K. Varshney, and K. Balakrishnan. An acknowledgement-based approach for the detection of routing misbehavior in MANETs. IEEE Transactions on Mobile Computing, 2007.
27. R. Mahajan, M. Rodrig, D. Wetherall, and J. Zahorjan. Sustaining cooperation in multi-hop wireless networks. In Usenix NSDI, 2005.
28. S. Marti, T. J. Giuli, K. Lai, and M. Baker. Mitigating routing misbehavior in mobile ad hoc networks. In ACM Mobicom, 2000.
29. A. T. Mizrak, Y. chung Cheng, K. Marzullo, and S. Savage. Fatih: Detecting and isolating malicious routers. In IEEE Transactions on Dependable and Secure Computing, 2005.
30. V. N. Padmanabhan and D. R. Simon. Secure traceroute to detect faulty or malicious routing. SIGCOMM Computer Communication Review (CCR), 33(1):77-82, 2003.
31. N. Spring, R. Mahajan, and D. Wetherall. Measuring isp topologies with rocketfuel. In ACM SIGCOMM, 2002.
32. R. Thomas. ISP security BOF, nanog 28. http://www.nanog.org/mtg-0306/pdf/ thomas.pdf.
33. M. Thorup and Y. Zhang. Tabulation based 4-universal hashing with applications to second moment estimation. SODA, 2004.
34. X. Zhang, A. Jain, and A. Perrig. Packet-dropping adversary identification for data plane security. In ACM CoNext, 2008.
35. X. Zhang, Z. Zhou, G. Hasker, A. Perrig, and V. Gligor. Network fault localization with small TCB. In Proceedings of the IEEE International Conference on Network Protocols (ICNP), 2011.
36. X. Zhang, Z. Zhou, H.-C. Hsiao, A. Perrig, and P. Tague. Shortmac: Efficient data plane fault localization. In Proceedings of the Network and Distributed System Security Symposium (NDSS), 2012.
37. R. Zhang-shen and N. Mckeown. Designing a predictable internet backbone with valiant load-balancing. In in IWQoS, 2005.