Security for multipath TCP: a constructive approach

Authors:
Javier Díez;Marcelo Bagnulo;Francisco Valera;Iván Vidal
Affiliations:
Telematics Engineering Department, University Carlos III of Madrid Avda. Universidad, 30, 28911 Leganés, Madrid, Spain.;Telematics Engineering Department, University Carlos III of Madrid Avda. Universidad, 30, 28911 Leganés, Madrid, Spain.;Telematics Engineering Department, University Carlos III of Madrid Avda. Universidad, 30, 28911 Leganés, Madrid, Spain.;Telematics Engineering Department, University Carlos III of Madrid Avda. Universidad, 30, 28911 Leganés, Madrid, Spain
Venue:
International Journal of Internet Protocol Technology
Year:
2011

Citing 4
Cited 1

Password authentication with insecure communication

Communications of the ACM
pTCP: An End-to-End Transport Layer Protocol for Striped Connections

ICNP '02 Proceedings of the 10th IEEE International Conference on Network Protocols
A transport layer approach for improving end-to-end performance and robustness using redundant paths

ATEC '04 Proceedings of the annual conference on USENIX Annual Technical Conference
The resource pooling principle

ACM SIGCOMM Computer Communication Review

Security aspects in the cognition cycle of distributed cognitive radio networks: a survey from a multi-agent perspective

International Journal of Ad Hoc and Ubiquitous Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Multipath TCP (MPTCP) is a new protocol being developed in the IETF|s MPTCP working group in order to provide higher communication availability and to improve the throughput between two multi-addressed endpoints by using multiple paths. Due to the multipath nature and specifically its path management, some new security threats arise apart from those that are already present in standard single-path TCP. These new attacks include flooding and hijacking attacks performed by an off-path attacker. In this paper, we explore different solutions in order to cover the identified security flaws. The main proposal is based on hash chains, which significantly reduces the initial set of threats resulting in a residual group of vulnerabilities, which are also identified.