CAPEC 설명

An adversary suppresses the Border Gateway Protocol (BGP) advertisement for a route so as to render the underlying network inaccessible. The BGP protocol helps traffic move throughout the Internet by selecting the most efficient route between Autonomous Systems (AS), or routing domains. BGP is the basis for interdomain routing infrastructure, providing connections between these ASs. By suppressing the intended AS routing advertisements and/or forcing less effective routes for traffic to ASs, the adversary can deny availability for the target network.

CAPEC 정보

사전 조건

The adversary must have control of a router that can modify, drop, or introduce spoofed BGP updates.The adversary can convince

필요 리소스

BGP Router

완화 방법

Implement Ingress filters to check the validity of received routes. However, this relies on the accuracy of Internet Routing Registries (IRRs) databases which are often not well-maintained.
Implement Secure BGP (S-BGP protocol), which improves authorization and authentication capabilities based on public-key cryptography.

참고 자료

REF-465

Why is it Taking so Long to Secure Internet Routing?
https://queue.acm.org/detail.cfm?id=2668966

REF-466

Beware of BGP Attacks
http://www.cc.gatech.edu/~dovrolis/Papers/ccr-bgp.pdf

제출

이름	조직	날짜	출시일
Seamus Tuohy		2017-01-12 +00:00

수정 사항

이름	조직	날짜	댓글
CAPEC Content Team	The MITRE Corporation	2019-09-30 +00:00	Updated Related_Attack_Patterns
CAPEC Content Team	The MITRE Corporation	2020-12-17 +00:00	Updated Mitigations

CAPEC-584 상세 정보

CAPEC-584