Protecting routing infrastructures from denial of service using cooperative intrusion detection

Proceedings New Security Paradigms Workshop

Volumn Part F129303, Issue , 1998, Pages 94-106

  Cheung, Steven ^a   Levitt, Karl N ^a  

^a Davis   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET PROTOCOLS; INTRUSION DETECTION; NETWORK SECURITY; ROUTERS;

COOPERATIVE INTRUSION DETECTION; DENIAL OF SERVICE; FAILURE MODEL; MALICIOUS ATTACK; MISCONFIGURATIONS; NETWORK INFRASTRUCTURE; ROUTING INFRASTRUCTURE; SOFTWARE/HARDWARE;

DENIAL-OF-SERVICE ATTACK;

EID: 85008056769     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/283699.283744     Document Type: Conference Paper

References (20)

1. The Fourth Workshop on Computer Misuse and Anomaly Detection (CMAD IV), Monterey, California, November 12-14, 1996.
2. M. Barborak, M. Malek, and A. Dahbura, "The Consensus Problem in Fault-Tolerant Computing." ACM Computing Surveys, Vol. 25, No. 2, June 1993, pp. 171-220.
3. D. Comer, "Internetworking with TCP/IP." Vol. 1, Prentice Hall, 1991.
4. D. Denning, "An Intrusion-Detection Model." IEEE Transactions on Software Engineering, Vol. SE-13, No. 2, Feb. 1987, pp. 222-232.
5. G. G. Finn, "Reducing the Vulnerability of Dynamic Computer Networks", ISI Research Report RR-88-201, University of Southern California, June 1988.
6. K. Ilgun, R. A. Kemmerer, and P. A. Porras, "State Transition Analysis: A Rule-Based Intrusion Detection Approach." IEEE Transactions on Software Engineering, Vol. 21, No. 3, March 1995, pp. 181-199.
7. Joint Technical Committee ISO/IEC JTC 1 Information Technology, "Intermediate System to Intermediate System Intra-domain Routeing Information Exchange Protocol for Use in Conjunction with the Connectionless-mode Network Service (ISO 8473)", ISO/IEC 10589, April 1992.
8. B. Kumar, and J. Crowcroft, "Integrating Security in Inter-domain Routing Protocols." Computer Communication Review, Oct. 1993, Vol. 23, No. 5, pp. 36-51.
9. T. F. Lunt, "A Survey of Intrusion Detection Techniques." Computer and Security, June 1993, Vol. 12, No. 4, pp. 405-418.
10. G. Malkin, "RIP Version 2 - Carrying Additional Information. " RFC 1723, November 1994.
11. J. McQuillan, I. Richer, and E. Rosen, "The New Routing Algorithm for the ARPANET." IEEE Transactions on Communications, Vol. COM-28, No. 5, May 1980, pp. 711-719.
12. th Conference on Dependable Computing for Critical Applications, San Diego, California, January 4-6, 1994, pp. 383-385.
13. J. Moy, "Link-State Routing", in M. Steenstrup, ed., Routing in Communications Networks, Prentice Hall, 1995, pp. 135-157.
14. J. Moy, "OSPF Version 2." RFC 2178, July 1997.
15. B. Mukherjee, L. T. Heberlein, and K. N. Levitt, "Network Intrusion Detection. " IEEE Network, May-June 1994, Vol. 8, No. 3, pp. 26-41.
16. S. L. Murphy, and M. R. Badger, "Digital Signature Protection of the OSPF Routing Protocol", Proceedings of the Symposium on Network and Distributed System Security (SNDSS'96), San Diego, California, February 22-23, 1996, pp. 93-102.
17. R. Perlman, "Network Layer Protocols with Byzantine Robustness." Ph. D. dissertation, Massachusetts Institute of Technology, August 1988.
18. R. Perlman, "Interconnections: Bridges and Routers." Addison-Wesley, 1992.
19. F. P. Preparata, G. Metze, and R. T. Chien, "On the Connection Assignment Problem of Diagnosable Systems." IEEE Transactions on Electronic Computers, Vol. EC-16, No. 6, Dec. 1967, pp. 848-854.
20. E. Rosen, "Vulnerabilities of Network Control Protocols: An Example." RFC 789, September 1981.