Beware of BGP attacks
Authors:
Open Access
- 1 April 2004
- journal article
- Published by Association for Computing Machinery (ACM) in ACM SIGCOMM Computer Communication Review
- Vol. 34 (2) , 1-8
Abstract
This note attempts to raise awareness within the network research community about the security of the interdomain routing infrastructure. We identify several attack objectives and mechanisms, assuming that one or more BGP routers have been compromised. Then, we review the existing and proposed countermeasures, showing that they are either generally ineffective (route filtering), or probably too heavyweight to deploy (S-BGP). We also review several recent proposals, and conclude by arguing that a significant research effort is urgently needed in the area of routing security.Keywords
This publication has 17 references indexed in Scilit:
- Detection of invalid routing announcement in the Internet2003
- Internet infrastructure security: a taxonomyIEEE Network, 2002
- Securing the Internet routing infrastructureIEEE Communications Magazine, 2002
- Route flap damping exacerbates internet routing convergence2002
- Understanding BGP misconfiguration2002
- Observation and analysis of BGP behavior under stress2002
- An analysis of BGP multiple origin AS (MOAS) conflicts2001
- Delayed Internet routing convergence2000
- Secure Border Gateway Protocol (S-BGP)IEEE Journal on Selected Areas in Communications, 2000
- Efficient security mechanisms for the border gateway routing protocolComputer Communications, 1998