How secure are secure interdomain routing protocols

Sharon Goldberg, Michael Schapira, Peter Hummon, Jennifer L. Rexford

Research output: Contribution to journalArticlepeer-review

38 Scopus citations

Abstract

In response to high-profile Internet outages, BGP security variants have been proposed to prevent the propagation of bogus routing information. To inform discussions of which variant should be deployed in the Internet, we quantify the ability of the main protocols (origin authentication, soBGP, S-BGP, and data-plane verification) to blunt traffic-attraction attacks; i.e., an attacker that deliberately attracts traffic to drop, tamper, or eavesdrop on packets. Intuition suggests that an attacker can maximize the traffic he attracts by widely announcing a short path that is not flagged as bogus by the secure protocol. Through simulations on an empirically-determined AS-level topology, we show that this strategy is surprisingly effective, even when the network uses an advanced security solution like S-BGP or data-plane verification. Worse yet, we show that these results underestimate the severity of attacks. We prove that finding the most damaging strategy is NP-hard, and show how counterintuitive strategies, like announcing longer paths, announcing to fewer neighbors, or triggering BGP loop-detection, can be used to attract even more traffic than the strategy above. These counterintuitive examples are not merely hypothetical; we searched the empirical AS topology to identify specific ASes that can launch them. Finally, we find that a clever export policy can often attract almost as much traffic as a bogus path announcement. Thus, our work implies that mechanisms that police export policies (e.g., defensive filtering) are crucial, even if S-BGP is fully deployed.

Original languageEnglish (US)
Pages (from-to)87-98
Number of pages12
JournalComputer Communication Review
Volume40
Issue number4
DOIs
StatePublished - 2010

All Science Journal Classification (ASJC) codes

  • Software
  • Computer Networks and Communications

Keywords

  • C.2.2 computer communication networks: Network Protocols
  • Security

Fingerprint

Dive into the research topics of 'How secure are secure interdomain routing protocols'. Together they form a unique fingerprint.

Cite this