CAPEC-584
BGP Route Disabling
2017-01-12
00h00 +00:00
00h00 +00:00
Cảnh báo cho một CAPEC
Luôn được thông báo về mọi thay đổi đối với một CAPEC cụ thể.
Mô tả CAPEC
An adversary suppresses the Border Gateway Protocol (BGP) advertisement for a route so as to render the underlying network inaccessible. The BGP protocol helps traffic move throughout the Internet by selecting the most efficient route between Autonomous Systems (AS), or routing domains. BGP is the basis for interdomain routing infrastructure, providing connections between these ASs. By suppressing the intended AS routing advertisements and/or forcing less effective routes for traffic to ASs, the adversary can deny availability for the target network.
Thông tin CAPEC
Điều kiện tiên quyết
The adversary must have control of a router that can modify, drop, or introduce spoofed BGP updates.The adversary can convinceTài nguyên cần thiết
BGP RouterCác biện pháp giảm thiểu
Implement Ingress filters to check the validity of received routes. However, this relies on the accuracy of Internet Routing Registries (IRRs) databases which are often not well-maintained.Implement Secure BGP (S-BGP protocol), which improves authorization and authentication capabilities based on public-key cryptography.
Tài liệu tham khảo
REF-465
Why is it Taking so Long to Secure Internet Routing?https://queue.acm.org/detail.cfm?id=2668966
REF-466
Beware of BGP Attackshttp://www.cc.gatech.edu/~dovrolis/Papers/ccr-bgp.pdf
Gửi
| Tên | Tổ chức | Ngày | Ngày phát hành |
|---|---|---|---|
| Seamus Tuohy |
Sửa đổi
| Tên | Tổ chức | Ngày | Bình luận |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Attack_Patterns | |
| CAPEC Content Team | The MITRE Corporation | Updated Mitigations |
