Research on DDoS attack and defense strategy for border gateway routing protocol
xiaoying yong, Lijun Gao · 2022
In this paper, the working mechanism of Border Gateway Protocol (BGP) is deeply analyzed. In order to solve the security problems of the Internet, reverse engineering method is used to put forward a DDoS attack model against BGP. The purpose is to solve the vulnerability problem of BGP. The network topology identification method based on the combination of BGP protocol attributes and Traceroute routing footprint solves the problem of locating the core routing nodes in the network topology. The OPNET simulation platform is used to build a network topology structure, and the core BGP router is simulated DDoS attacks to verify the vulnerability of BGP protocol DDoS attacks will lead to severe network traffic concussion, and even the possibility of network paralysis. Finally, an exploratory defense strategy based on BGP DDoS attack is proposed to address the vulnerability of BGP.