Global Internet Routing Forensics
Eunjong Kim, Dan Massey, Indrajit Ray · Kluwer Academic Publishers eBooks · 2006
The Border Gateway Protocol (BGP), the Internet’s global routing protocol, lacks basic authentication and monitoring functionality. Thus, false routing information can be introduced into the Internet, which can cause the total collapse of packet forwarding and lead to denial-of-service or misdirected traffic. While it may be impossible to prevent such an attack, we seek to provide the routing infrastructure with a mechanism for identifying false paths through efficient validation, proper recording and forensic analysis of routing data. Towards this end, we propose a novel BGP path verification technique using ICMP traceback messages that has been extended to include AS-PATH and link connectivity information. The approach can be easily deployed as it does not require modifications to BGP.