On Evaluating BGP Routing Stress Attack

نویسندگان

  • Wenping Deng
  • Peidong Zhu
  • Xicheng Lu
  • Bernhard Plattner
چکیده

The routing system is playing a critical role in the Internet. Numerous routing security events reveal that the Internet is not so dependable yet. Some hackers even boasted that they could bring down the whole Internet in a short time. This paper investigates a new attack on BGP routing system inspired from synchronization and resonance in complex system. The attack applies routing stress by periodically injecting and propagating excessive BGP routing advertisements which are beyond the processing ability and the storage capacity of the BGP routers in the routing system. Our contributions are twofold. First, we describe a BGP routing stress attack method inspired from synchronization and resonance of complex network. Second, we devise a cascading failure model to evaluate the robustness under BGP routing stress attack on the real Internet AS-level topology. We measure the dependability and the connectivity under cascading failures with three metrics: the proportion of failed ASes, the proportion of failed links, and the proportion of disconnected AS-AS pairs. Our experimental results show that BGP routing stress attack can eventually lead to a high proportion of failures and bring about serious impacts on the connectivity of the Internet routing system.

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Evaluation of Prefix Hijacking Impact Based on Hinge-Transmit Property of BGP Routing System

BGP prefix hijacking is a sort of serious security threat of the Internet. In a hijacking attack, the attacker try to convince ASes to become infectors for redirecting data traffic to him in stead of the victim. The more infectors there are, the larger impact an attack has. It is important to understand the root of the matter why the impact of prefix hijacking differs a lot in different attacks...

متن کامل

Analysis of BGP Update Surge during Slammer Worm Attack

Although the Internet routing infrastructure was not a direct target of the January 2003 Slammer worm attack, the worm attack coincided in time with a large, globally observed increase in the number of BGP routing update messages. Our analysis shows that the current global routing protocol BGP allows local connectivity dynamics to propagate globally. As a result, any small number of edge networ...

متن کامل

Detecting Malicious Dropping Attack in the Internet

The current interdomain routing protocol, Border Gateway Protocol, is limited in implementations of universal security. Because of this, it is vulnerable to many attacks at the AS to AS routing infrastructure. Initially, the major concern about BGP security is that malicious BGP routers can arbitrarily falsify BGP routing messages and spread incorrect routing information. Recently, some authors...

متن کامل

Low-Rate TCP-Targeted DoS Attack Disrupts Internet Routing

Compared to attacks against end hosts, Denial of Service (DoS) attacks against the Internet infrastructure such as those targeted at routers can be more devastating due to their global impact on many networks. We discover that the recently identified low-rate TCP-targeted DoS attacks can have severe impact on the Border Gateway Protocol (BGP). As the interdomain routing protocol on today’s Inte...

متن کامل

Darwin’s Secure BGP? An Open Platform for the Evolution of Routing Security

For the past decade, operators and researchers have struggled with how to response to well-known security vulnerabilities in BGP. Despite many strong technical proposals, an agreed upon and deployed solution remains distant [2]. Instead of focusing on selecting and globally deploying a particular secure routing proposal (s-BGP vs. so-BGP, etc.), we advocate the creation of a generic interface f...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

عنوان ژورنال:
  • JCM

دوره 5  شماره 

صفحات  -

تاریخ انتشار 2010