review-article

Open access

Securing internet applications from routing attacks

Authors:

Prateek MittalAuthors Info & Claims

Communications of the ACM, Volume 64, Issue 6

Pages 86 - 96

https://doi.org/10.1145/3429775

Published: 24 May 2021 Publication History

All formats PDF

Abstract

Application-layer and network-layer defenses are critical for fortifying routing attacks.

References

[1]

Apostolaki, M., Marti, G., Muller, J., and Vanbever, L. SABRE: Protecting Bitcoin against routing attacks. In Proceedings of Network and Distributed System Security Symp., 2019.

Crossref

Google Scholar

[2]

Apostolaki, M., Zohar, A., and Vanbever, L. Hijacking Bitcoin: Routing attacks on cryptocurrencies. In Proceedings of IEEE Symp. on Security and Privacy, 2017.

Crossref

Google Scholar

[3]

Birge-Lee, H., Sun, Y., Edmundson, A., Rexford, J., and Mittal, P. Bamboozling certificate authorities with BGP. In Proceedings of USENIX Security Symp., 2018.

Google Scholar

[4]

Birge-Lee, H., Wang, L., Rexford, J., and Mittal, P. SICO: Surgical interception attacks by manipulating BGP communities. In Proceedings of ACM Con. Computer and Communications Security, 2019.

Digital Library

Google Scholar

[5]

Boldyreva, A. and Lychev, R. Provable security of S-BGP and other path vector protocols: Model, analysis and extensions. In Proceedings of ACM Conf. Computer and Communications Security, 2012.

Digital Library

Google Scholar

[6]

Bush, R. and Austein, R. The Resource Public Key Infrastructure (RPKI) to Router Protocol. RFC 6810, RFC Editor, Jan. 2013.

Google Scholar

[7]

Dingledine, R., Mathewson, N., and Syverson, P. Tor: The second-generation onion router. In Proceedings of USENIX Security Symp., 2004.

Crossref

Google Scholar

[8]

Gill, P., Schapira, M., and Goldberg, S. Let the market drive deployment: A strategy for transitioning to BGP security. ACM SIGCOMM, 2011.

Digital Library

Google Scholar

[9]

Goldberg, S. Surveillance without borders: The "traffic shaping" loophole and why it matters. The Century Foundation, 2017.

Google Scholar

[10]

Hu, X. and Mao, Z.M. Accurate real-time identification of IP prefix hijacking. In Proceedings of IEEE Symp. on Security and Privacy, 2007.

Digital Library

Google Scholar

[11]

Kent, S., Lynn, C., and Seo, K. Secure border gateway protocol (S-BGP). IEEE J. Selected Areas in Commun. 18, 4 (2000), 582--592.

Digital Library

Google Scholar

[12]

Lad, M., Massey, D., Pei, D., Wu, Y., Zhang, B., and Zhang, L. PHAS: A prefix hijack alert system. In Proceedings of USENIX Security Symp., 2006.

Google Scholar

[13]

Lepinski, M. and Sriram, K. BGPsec Protocol Specification. RFC 8205, RFC Editor, Sept. 2017.

Google Scholar

[14]

Lychev, R., Goldberg, S., and Schapira, M. BGP security in partial deployment: Is the juice worth the squeeze? ACM SIGCOMM, 2013.

Digital Library

Google Scholar

[15]

Qiu, J., Gao, L., Ranjan, S., and Nucci, A. Detecting bogus BGP route information: Going beyond prefix hijacking. SecureComm, 2007.

Crossref

Google Scholar

[16]

Reuter, A., Bush, R., Cunha, I., Katz-Bassett, E., Schmidt, T.C., and Wahlisch, M. Towards a rigorous methodology for measuring adoption of RPKI route validation and filtering. ACM SIGCOMM Computer Commun. Rev. 48, 1 (2018), 19--27.

Digital Library

Google Scholar

[17]

Scheitle, Q. et al. A first look at certification authority authorization (CAA). SIGCOMM Comput. Commun. Rev., 48(2):10--23, May 2018.

Digital Library

Google Scholar

[18]

Schlinker, B., Arnold, T., Cunha, I., and Katz-Bassett, E. PEERING: Virtualizing BGP at the edge for research. In Proceedings of ACM SIGCOMM CoNEXT Conf. Dec. 2019.

Digital Library

Google Scholar

[19]

Shi, X., Xiang, Y., Wang, Z., Yin, X., and Wu, J. Detecting prefix hijackings in the Internet with Argus. In Proceedings of Internet Measurement Conf., 2012.

Digital Library

Google Scholar

[20]

Snijders, J. Practical everyday BGP filtering with AS PATH filters: PeerLocking. NANOG-67, Chicago, June, 2016.

Google Scholar

[21]

Sun, Y., Edmundson, A., Feamster, N., Chiang, M., and Mittal, P. Counter-RAPTOR: Safeguarding Tor against active routing attacks. In Proceedings of IEEE Symp. Security and Privacy, 2017.

Crossref

Google Scholar

[22]

Sun, Y., Edmundson, A., Vanbever, L., Li, O., Rexford, J., Chiang, M., and Mittal, P. RAPTOR: Routing attacks on privacy in Tor. In Proceedings of USENIX Security Symp., 2015.

Google Scholar

[23]

Tan, H., Sherr, M., and Zhou, W. Data-plane defenses against routing attacks on Tor. In Privacy Enhancing Technologies Symp., 2016.

Crossref

Google Scholar

[24]

Zhang, Z., Zhang, Y., Hu, Y.C., Mao, Z.M. and Bush, R. iSpy: Detecting IP prefix hijacking on my own. ACM SIGCOMM, 2008.

Digital Library

Google Scholar

[25]

Zheng, C., Ji, L., Pei, D., Wang, J., and Francis, P. A lightweight distributed scheme for detecting IP prefix hijacks in real-time. ACM SIGCOMM, 2007.

Google Scholar

[26]

Birge-Lee, H., Wang, L., McCarney, D., Shoemaker, R., Rexford, J., and Mittal, P. Experiences deploying multi-vantage-point domain validation at Let's Encrypt. In Proceedings of USENIX Security Symp., 2021

Google Scholar

Cited By

View all

Obelovska KTkachuk OSnaichuk Y(2024)Minimizing the Number of Distrustful Nodes on the Path of IP Packet TransmissionComputation10.3390/computation1205009112:5(91)Online publication date: 3-May-2024
https://doi.org/10.3390/computation12050091
Abudin MThokchom SSiano PPanda G(2024)A Comprehensive Survey on Cyberattacks in Smart Grid NetworksProceedings of Third International Symposium on Sustainable Energy and Technological Advancements10.1007/978-981-97-6976-6_3(25-41)Online publication date: 10-Dec-2024
https://doi.org/10.1007/978-981-97-6976-6_3
Hussain MHanapi Z(2023)Efficient Secure Routing Mechanisms for the Low-Powered IoT Network: A Literature ReviewElectronics10.3390/electronics1203048212:3(482)Online publication date: 17-Jan-2023
https://doi.org/10.3390/electronics12030482
Show More Cited By

Index Terms

Securing internet applications from routing attacks
1. Networks
  1. Network properties
    1. Network security
      1. Denial-of-service attacks
      2. Security protocols

Recommendations

Securing web applications from injection and logic vulnerabilities

Context: Web applications are trusted by billions of users for performing day-to-day activities. Accessibility, availability and omnipresence of web applications have made them a prime target for attackers. A simple implementation flaw in the ...
Handling Network Attacks Exploiting Routing Information Asymmetries
Securing Structured Overlays against Identity Attacks

Structured overlay networks can greatly simplify data storage and management for a variety of distributed applications. Despite their attractive features, these overlays remain vulnerable to the Identity attack, where malicious nodes assume control of ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

Communications of the ACM Volume 64, Issue 6

June 2021

106 pages

ISSN:0001-0782

EISSN:1557-7317

DOI:10.1145/3467845

Editor:
Andrew A. Chien
Association for Computing Machinery, New York, NY

Issue’s Table of Contents

This work is licensed under a Creative Commons Attribution International 4.0 License.

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 24 May 2021

Published in CACM Volume 64, Issue 6

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Qualifiers

Review-article
Popular
Refereed

Funding Sources

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

11
Total Citations
View Citations
13,343
Total Downloads

Downloads (Last 12 months)1,245
Downloads (Last 6 weeks)122

Reflects downloads up to 19 Dec 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Obelovska KTkachuk OSnaichuk Y(2024)Minimizing the Number of Distrustful Nodes on the Path of IP Packet TransmissionComputation10.3390/computation1205009112:5(91)Online publication date: 3-May-2024
https://doi.org/10.3390/computation12050091
Abudin MThokchom SSiano PPanda G(2024)A Comprehensive Survey on Cyberattacks in Smart Grid NetworksProceedings of Third International Symposium on Sustainable Energy and Technological Advancements10.1007/978-981-97-6976-6_3(25-41)Online publication date: 10-Dec-2024
https://doi.org/10.1007/978-981-97-6976-6_3
Hussain MHanapi Z(2023)Efficient Secure Routing Mechanisms for the Low-Powered IoT Network: A Literature ReviewElectronics10.3390/electronics1203048212:3(482)Online publication date: 17-Jan-2023
https://doi.org/10.3390/electronics12030482
Meshram TDasgupta M(2023)Blackhole Attack Detection and Analysis of Routing Protocol in the Context of Internet of Vehicles2023 International Conference on Quantum Technologies, Communications, Computing, Hardware and Embedded Systems Security (iQ-CCHESS)10.1109/iQ-CCHESS56596.2023.10391363(1-7)Online publication date: 15-Sep-2023
https://doi.org/10.1109/iQ-CCHESS56596.2023.10391363
von Arx TTran MVanbever L(2023)Revelio: A Network-Level Privacy Attack in the Lightning Network2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P)10.1109/EuroSP57164.2023.00060(942-957)Online publication date: Jul-2023
https://doi.org/10.1109/EuroSP57164.2023.00060
Wassink BZhao Z(2023)Increasing Robustness of Blockchain Peer-to-Peer Networks with Alternative Peer Initialization2023 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)10.1109/CloudCom59040.2023.00060(325-332)Online publication date: 4-Dec-2023
https://doi.org/10.1109/CloudCom59040.2023.00060
Haddad Z(2023)Blockchain-enabled anonymous mutual authentication and location privacy-preserving scheme for 5 G networksJournal of King Saud University - Computer and Information Sciences10.1016/j.jksuci.2022.11.01835:6Online publication date: 1-Jun-2023
https://dl.acm.org/doi/10.1016/j.jksuci.2022.11.018
Pastor-Galindo JGómez Mármol FMartínez Pérez G(2023)On the gathering of Tor onion addressesFuture Generation Computer Systems10.1016/j.future.2023.02.024145:C(12-26)Online publication date: 1-Aug-2023
https://dl.acm.org/doi/10.1016/j.future.2023.02.024
Satoh TNagayama SSuzuki SMatsuo THajdusek MMeter R(2021)Attacking the Quantum InternetIEEE Transactions on Quantum Engineering10.1109/TQE.2021.30949832(1-17)Online publication date: 2021
https://doi.org/10.1109/TQE.2021.3094983
Bartoli A(2021)Robustness analysis of DNS paths and web access paths in public administration websitesComputer Communications10.1016/j.comcom.2021.09.017180:C(243-258)Online publication date: 1-Dec-2021
https://dl.acm.org/doi/10.1016/j.comcom.2021.09.017
Show More Cited By

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Digital Edition

View this article in digital edition.

Digital Edition

Magazine Site

View this article on the magazine site (external)

Magazine Site

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Abstract

References

Cited By

Index Terms

Recommendations

Securing web applications from injection and logic vulnerabilities

Handling Network Attacks Exploiting Routing Information Asymmetries

Securing Structured Overlays against Identity Attacks

Comments

Information

Published In

Publisher

Publication History

Permissions

Check for updates

Qualifiers

Funding Sources

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

View options

PDF

eReader

Digital Edition

Magazine Site

Login options

Full Access

Figures

Other

Share

Share this Publication link

Share on social media

Affiliations