並列摘要
IP prefix hijacking in the Internet remains a threat to the security of routing and network applications. It is difficult for a router or network operator to identify the spoofed announcement of prefix ownership in a timely and accurate way for the lack of complete knowledge or authentication. This paper proposes a method, called CoMonitor, for prefix hijacking detection based on cooperation among Autonomous Systems (ASes). Every participating AS exchanges self-defined prefix-to-origin mapping information with others, and they monitor local BGP updates respectively. Once a participant discovers that the origin information of a BGP route is inconsistent with the learned prefix-to-origin mapping information, it notifies related participants immediately. The self-organized overlay network can help ASes detect prefix hijacks quickly and effectively. The paper describes its architecture, mechanisms and implementation details. Its effectiveness is validated through experiments and analysis.
被引用紀錄
延伸閱讀
- Chen, Y. F. (2021). Detecting and Preventing HTTP Request Smuggling Attacks [master's thesis, National Tsing Hua University]. Airiti Library. https://www.airitilibrary.com/Article/Detail?DocID=U0016-2412202116195895
- Chen, J. M. (2009). AN AUTOMATED DEFENSE MECHANISM FOR WEB APPLICATION INJECTION ATTACK [doctoral dissertation, Tatung University]. Airiti Library. https://www.airitilibrary.com/Article/Detail?DocID=U0081-3001201315104932
- 王茂吉（2003）。An Application-Based Intrusion Detection System for Web Server〔碩士論文，中原大學〕。華藝線上圖書館。https://doi.org/10.6840/cycu200300147
- 梅興, & 洪毓偉 (2000). Hybrid Prefetching for HTTP Proxy Servers. 網際網路技術學刊, 1(2), 11-21. https://www.airitilibrary.com/Article/Detail?DocID=16079264-200012-1-2-11-21-a
- 吳奕寬（2015）。A Solution to Router-Hijacking ARP Spoofing Attacks〔碩士論文，國立中央大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0031-0412201512070139