Global Internet Routing Forensics: Validation of BGP Paths Using ICMP Traceback

Nearly all network applications rely on the global Internet routing infrastructure to compute routes and deliver packets. Unfortunately, false Internet routes can be maliciously introduced with relative ease into the routing infrastructure. This is because Border Gateway Protocol (BGP), the Internet’s global routing protocol, lacks basic authentication and monitoring functionalities. If false routes are introduced, it can lead to total collapse of packet forwarding leading to denial of service or misdirected traffic. Currently, it is impossible to prevent such malicious injection of false traffic routes. We believe that an ability to identify false paths through efficient validation, proper recording and forensic analysis of routing data, will considerably help in the prosecution of the miscreant and will act as a strong deterrent. In this work we propose such a mechanism. For each path information, we use ICMP (Internet Control Message Protocol) traceback message with AS-PATH inf...

• Type: Conference
• Year: 2005
• Where: IFIP
• Authors: Eunjong Kim, Daniel Massey, Indrajit Ray
• Keywords: Communications, False, False Internet Routes, IFIP 2005, Routing