A novel approach to detect extraneous network traffic from the compromised router
Rajendra Shivaji Patil, Chirag Modi · 2016
In today's Internet scenario, routers play a vital role of connecting two different networks, where in Internet service provider offers services from one network and users can access such services from different networks. For this, routers are customized to fulfill the requirements of such heterogeneous networks. However, customization of router leads to some of the vulnerabilities through which an attacker can compromise the router, and can perform various attacks over the Internet. Extraneous network traffic (unexpected network traffic) is one of the attacks, which can be performed through compromised routers. Here, the main challenge is to differentiate extra data- plane traffic from regular data-plane traffic. In this paper, we propose an analyzer based solution to detect extraneous traffic generated by compromised router. Our analyzer monitors the forwarding behavior of router and detects extraneous packets by comparing source and destination IPs of packets with the consideration of router's performance and efficiency. We analyze the proposed solution by performing different experiments.