Truth in advertising: lightweight verification of route integrity

Authors:
Edmund L. Wong;Praveen Balasubramanian;Lorenzo Alvisi;Mohamed G. Gouda;Vitaly Shmatikov
Affiliations:
The University of Texas at Austin;The University of Texas at Austin;The University of Texas at Austin;The University of Texas at Austin;The University of Texas at Austin
Venue:
Proceedings of the twenty-sixth annual ACM symposium on Principles of distributed computing
Year:
2007

Citing 15
Cited 9

End-to-end internet packet dynamics

IEEE/ACM Transactions on Networking (TON)
Providing guaranteed services without per flow management

Proceedings of the conference on Applications, technologies, architectures, and protocols for computer communication
Summary cache: a scalable wide-area web cache sharing protocol

IEEE/ACM Transactions on Networking (TON)
Practical network support for IP traceback

Proceedings of the conference on Applications, Technologies, Architectures, and Protocols for Computer Communication
The click modular router

ACM Transactions on Computer Systems (TOCS)
Space/time trade-offs in hash coding with allowable errors

Communications of the ACM
Single-packet IP traceback

IEEE/ACM Transactions on Networking (TON)
Understanding BGP misconfiguration

Proceedings of the 2002 conference on Applications, technologies, architectures, and protocols for computer communications
Space Efficient Hash Tables with Worst Case Constant Access Time

STACS '03 Proceedings of the 20th Annual Symposium on Theoretical Aspects of Computer Science
Secure traceroute to detect faulty or malicious routing

ACM SIGCOMM Computer Communication Review
Towards an accurate AS-level traceroute tool

Proceedings of the 2003 conference on Applications, technologies, architectures, and protocols for computer communications
Fatih: Detecting and Isolating Malicious Routers

DSN '05 Proceedings of the 2005 International Conference on Dependable Systems and Networks
Listen and whisper: security mechanisms for BGP

NSDI'04 Proceedings of the 1st conference on Symposium on Networked Systems Design and Implementation - Volume 1
Stealth probing: efficient data-plane security for IP routing

ATEC '06 Proceedings of the annual conference on USENIX '06 Annual Technical Conference
Secure Border Gateway Protocol (S-BGP)

IEEE Journal on Selected Areas in Communications

Rationality and traffic attraction: incentives for honest path announcements in bgp

Proceedings of the ACM SIGCOMM 2008 conference on Data communication
Symmetric Key Approaches to Securing BGP --- A Little Bit Trust Is Enough

ESORICS '08 Proceedings of the 13th European Symposium on Research in Computer Security: Computer Security
Protocols and lower bounds for failure localization in the internet

EUROCRYPT'08 Proceedings of the theory and applications of cryptographic techniques 27th annual international conference on Advances in cryptology
How secure are secure interdomain routing protocols

Proceedings of the ACM SIGCOMM 2010 conference
Incentivizing responsible networking via introduction-based routing

TRUST'11 Proceedings of the 4th international conference on Trust and trustworthy computing
DMIPS: defensive mechanism against IP spoofing

ACISP'11 Proceedings of the 16th Australasian conference on Information security and privacy
Private and verifiable interdomain routing decisions

Proceedings of the ACM SIGCOMM 2012 conference on Applications, technologies, architectures, and protocols for computer communication
Private and verifiable interdomain routing decisions

ACM SIGCOMM Computer Communication Review - Special october issue SIGCOMM '12
Collaborative Technology: A network accountability based verification mechanism for detecting inter-domain routing path inconsistency

Journal of Network and Computer Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

We design and evaluate a lightweight route verification mechanism that enables a router to discover route failures and inconsistencies between advertised Internet routes and actual paths taken by the data packets. Our mechanism is accurate, incrementally deployable, and secure against malicious intermediary routers. By carefully avoiding any cryptographic operations in the data path, our prototype implementation achieves the overhead of less than 1% on a 1 Gbps link, demonstrating that our method is suitable even for high-performance networks.