Securing Internet Applications from Routing Attacks

04/20/2020
by   Yixin Sun, et al.
0

Attacks on Internet routing are typically viewed through the lens of availability and confidentiality, assuming an adversary that either discards traffic or performs eavesdropping. Yet, a strategic adversary can use routing attacks to compromise the security of critical Internet applications like Tor, certificate authorities, and the bitcoin network. In this paper, we survey such application-specific routing attacks and argue that both application-layer and network-layer defenses are essential and urgently needed. The good news is that, while deployment challenges have hindered the adoption of network-layer defenses (i.e. secure routing protocols) thus far, application-layer defenses are much easier to deploy in the short term.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
03/15/2022

This is not the padding you are looking for! On the ineffectiveness of QUIC PADDING against website fingerprinting

Website fingerprinting (WF) is a well-know threat to users' web privacy....
research
01/05/2018

Tempest: Temporal Dynamics in Anonymity Systems

Many recent proposals for anonymous communication omit from their securi...
research
05/28/2019

An Investigation of Data Poisoning Defenses for Online Learning

We consider data poisoning attacks, where an adversary can modify a smal...
research
03/08/2022

DeepSE-WF: Unified Security Estimation for Website Fingerprinting Defenses

Website fingerprinting (WF) attacks, usually conducted with the help of ...
research
08/19/2018

SABRE: Protecting Bitcoin against Routing Attacks

Routing attacks remain practically effective in the Internet today as ex...
research
05/09/2022

SRv6: Is There Anybody Out There?

Segment routing is a modern form of source-based routing, i.e., a routin...
research
10/12/2020

Bankrupting Sybil Despite Churn

A Sybil attack occurs when an adversary pretends to be multiple identiti...

Please sign up or login with your details

Forgot password? Click here to reset