TY - GEN
T1 - The detection of malicious misrouting of packets on internet
AU - Yeung, K. H.
AU - Fung, Derek
AU - Wong, K. Y.
PY - 2007
Y1 - 2007
N2 - Malicious misrouting of packets is a kind of packet mistreatment attack. In such attack a malicious router misroute packets so that triangle routing is formed. This kind of attack is very difficult to detect, and the problem is considered as an open problem. In this paper, a solution to the problem is proposed. The paper first discusses a simple but effective method to detect packet misrouting. By setting up detection agents on all links of a network, the method can trace the misrouted path and identify the malicious router. Discussion on how to react to the attacks after detection is also given in the paper. Experiments using Cisco routers were run. The experiments aim at showing that a malicious router can easily launch packet mistreatment attacks by simple router configurations. The paper then discusses the effectiveness of the proposed method by presenting the results obtained from a simulator. The simulator implements the detection algorithm discussed in this paper, and simulates how packet misrouting can be detected in real network operations. Based on the results, it is concluded that misrouted packets can effectively be detected by using the proposed method. Finally, the paper concludes itself by pointing out further possible work in this important area.
AB - Malicious misrouting of packets is a kind of packet mistreatment attack. In such attack a malicious router misroute packets so that triangle routing is formed. This kind of attack is very difficult to detect, and the problem is considered as an open problem. In this paper, a solution to the problem is proposed. The paper first discusses a simple but effective method to detect packet misrouting. By setting up detection agents on all links of a network, the method can trace the misrouted path and identify the malicious router. Discussion on how to react to the attacks after detection is also given in the paper. Experiments using Cisco routers were run. The experiments aim at showing that a malicious router can easily launch packet mistreatment attacks by simple router configurations. The paper then discusses the effectiveness of the proposed method by presenting the results obtained from a simulator. The simulator implements the detection algorithm discussed in this paper, and simulates how packet misrouting can be detected in real network operations. Based on the results, it is concluded that misrouted packets can effectively be detected by using the proposed method. Finally, the paper concludes itself by pointing out further possible work in this important area.
KW - Intrusion detection
KW - Network attacks
KW - Network security
KW - Routing
UR - https://www.scopus.com/pages/publications/56149106941
UR - https://www.scopus.com/pages/publications/56149106941#tab=impact
M3 - RGC 32 - Refereed conference paper (with host publication)
SN - 9780889866379
SP - 214
EP - 219
BT - Proceedings of the IASTED International Conference on Parallel and Distributed Computing and Systems
T2 - IASTED International Conference on Parallel and Distributed Computing and Networks, PDCN 2007
Y2 - 13 February 2007 through 15 February 2007
ER -