• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE Conference on Local Computer Networks >Reclaim Your Prefix: Mitigation of Prefix Hijacking Using IPsec Tunnels
【24h】

Reclaim Your Prefix: Mitigation of Prefix Hijacking Using IPsec Tunnels

机译：收回您的前缀：使用IPsec隧道缓解前缀劫持

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Prefix hijacking is a serious threat in the Internet routing landscape. The Border Gateway Protocol has no origin authentication by design. Countermeasures, e.g. on-top authentication as implemented by R-PKI infrastructures, are not yet deployed on a very large scale. Being victim of prefix hijacking is a difficult situation with few options. Not only the owner of a prefix is victim but all the networks being deceived by the attacker. They are unable to communicate with the owner and corresponding traffic travels into the wrong direction. Current data from the Internet routing plane as collected by RIPE-NCC is examined to detect prefix hijacking. This paper discusses means to manipulate the partitions resulting from prefix hijacking with router inherent functionality. By this means, prefix owners become able to increase their impact and enlarge the corresponding partition, with just one assistant Autonomous System (AS). Selection strategies to find a well suited assistant AS are compared and the top three are verified in an emulation environment. Therefore, an emulation network is created on the dataset that is representative for prefix hijacking in the Internet. The presented approach can be the foundation of a (semi-)automated tool to mitigate prefix hijacking in the future.
机译：前缀劫持是Internet路由领域中的严重威胁。边界网关协议在设计上没有原始身份验证。对策，例如由R-PKI基础结构实现的实时身份验证尚未大规模部署。成为前缀劫持的受害者是一个困难的局面，几乎没有其他选择。不仅前缀的所有者是受害者，而且攻击者欺骗所有网络。他们无法与所有者通信，并且相应的流量进入错误的方向。 RIPE-NCC收集了来自Internet路由平面的当前数据，以检测前缀劫持。本文讨论了使用路由器固有功能来操纵前缀劫持所导致的分区的方法。通过这种方式，前缀所有者可以仅使用一个辅助自治系统（AS）来增加其影响并扩大相应的分区。比较找到适合的助理AS的选择策略，并在仿真环境中验证前三个。因此，在数据集上创建一个模拟网络，该网络代表Internet中的前缀劫持。所提出的方法可以作为（半）自动化工具的基础，以减轻将来的前缀劫持。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号