Losing control of the Internet: Using the data plane to attack the control plane

Max Schuchard; Abedelaziz Mohaisen; Denis Foo Kune; Nicholas Hopper; Yongdae Kim; Eugene Y. Vasserman

doi:10.1145/1866307.1866411

Losing control of the Internet: Using the data plane to attack the control plane

Max Schuchard, Abedelaziz Mohaisen, Denis Foo Kune, Nicholas Hopper, Yongdae Kim, Eugene Y. Vasserman

Computer Science and Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

76 Scopus citations

Abstract

In this work, we introduce the Coordinated Cross Plane Session Termination, or CXPST, attack, a distributed denial of service attack that attacks the control plane of the Internet. CXPST extends previous work that demonstrates a vulnerability in routers that allows an adversary to disconnect a pair of routers using only data plane traffic. By carefully choosing BGP sessions to terminate, CXPST generates a surge of BGP updates that are seen by nearly all core routers on the Internet. This surge of updates surpasses the computational capacity of affected routers, crippling their ability to make routing decisions.

Original language	English (US)
Title of host publication	CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security
Pages	726-728
Number of pages	3
DOIs	https://doi.org/10.1145/1866307.1866411
State	Published - 2010
Event	17th ACM Conference on Computer and Communications Security, CCS'10 - Chicago, IL, United States Duration: Oct 4 2010 → Oct 8 2010

Publication series

Name	Proceedings of the ACM Conference on Computer and Communications Security
ISSN (Print)	1543-7221

Other

Other	17th ACM Conference on Computer and Communications Security, CCS'10
Country/Territory	United States
City	Chicago, IL
Period	10/4/10 → 10/8/10

Keywords

BGP
Botnet
DDoS
Internet

Publisher link

10.1145/1866307.1866411

Find It

Find It at U of M Libraries

Cite this

Schuchard, M., Mohaisen, A., Foo Kune, D., Hopper, N., Kim, Y., & Vasserman, E. Y. (2010). Losing control of the Internet: Using the data plane to attack the control plane. In CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security (pp. 726-728). (Proceedings of the ACM Conference on Computer and Communications Security). https://doi.org/10.1145/1866307.1866411

Losing control of the Internet: Using the data plane to attack the control plane. / Schuchard, Max; Mohaisen, Abedelaziz; Foo Kune, Denis et al.
CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security. 2010. p. 726-728 (Proceedings of the ACM Conference on Computer and Communications Security).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Schuchard, M, Mohaisen, A, Foo Kune, D, Hopper, N, Kim, Y & Vasserman, EY 2010, Losing control of the Internet: Using the data plane to attack the control plane. in CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security. Proceedings of the ACM Conference on Computer and Communications Security, pp. 726-728, 17th ACM Conference on Computer and Communications Security, CCS'10, Chicago, IL, United States, 10/4/10. https://doi.org/10.1145/1866307.1866411

@inproceedings{698dddfcc34d49afb8ef6731aa68dd21,

title = "Losing control of the Internet: Using the data plane to attack the control plane",

abstract = "In this work, we introduce the Coordinated Cross Plane Session Termination, or CXPST, attack, a distributed denial of service attack that attacks the control plane of the Internet. CXPST extends previous work that demonstrates a vulnerability in routers that allows an adversary to disconnect a pair of routers using only data plane traffic. By carefully choosing BGP sessions to terminate, CXPST generates a surge of BGP updates that are seen by nearly all core routers on the Internet. This surge of updates surpasses the computational capacity of affected routers, crippling their ability to make routing decisions.",

keywords = "BGP, Botnet, DDoS, Internet",

author = "Max Schuchard and Abedelaziz Mohaisen and {Foo Kune}, Denis and Nicholas Hopper and Yongdae Kim and Vasserman, {Eugene Y.}",

year = "2010",

doi = "10.1145/1866307.1866411",

language = "English (US)",

isbn = "9781450302449",

series = "Proceedings of the ACM Conference on Computer and Communications Security",

pages = "726--728",

booktitle = "CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security",

note = "17th ACM Conference on Computer and Communications Security, CCS'10 ; Conference date: 04-10-2010 Through 08-10-2010",

}

TY - GEN

T1 - Losing control of the Internet

T2 - 17th ACM Conference on Computer and Communications Security, CCS'10

AU - Schuchard, Max

AU - Mohaisen, Abedelaziz

AU - Foo Kune, Denis

AU - Hopper, Nicholas

AU - Kim, Yongdae

AU - Vasserman, Eugene Y.

PY - 2010

Y1 - 2010

N2 - In this work, we introduce the Coordinated Cross Plane Session Termination, or CXPST, attack, a distributed denial of service attack that attacks the control plane of the Internet. CXPST extends previous work that demonstrates a vulnerability in routers that allows an adversary to disconnect a pair of routers using only data plane traffic. By carefully choosing BGP sessions to terminate, CXPST generates a surge of BGP updates that are seen by nearly all core routers on the Internet. This surge of updates surpasses the computational capacity of affected routers, crippling their ability to make routing decisions.

AB - In this work, we introduce the Coordinated Cross Plane Session Termination, or CXPST, attack, a distributed denial of service attack that attacks the control plane of the Internet. CXPST extends previous work that demonstrates a vulnerability in routers that allows an adversary to disconnect a pair of routers using only data plane traffic. By carefully choosing BGP sessions to terminate, CXPST generates a surge of BGP updates that are seen by nearly all core routers on the Internet. This surge of updates surpasses the computational capacity of affected routers, crippling their ability to make routing decisions.

KW - BGP

KW - Botnet

KW - DDoS

KW - Internet

UR - http://www.scopus.com/inward/record.url?scp=78649993132&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=78649993132&partnerID=8YFLogxK

U2 - 10.1145/1866307.1866411

DO - 10.1145/1866307.1866411

M3 - Conference contribution

AN - SCOPUS:78649993132

SN - 9781450302449

T3 - Proceedings of the ACM Conference on Computer and Communications Security

SP - 726

EP - 728

BT - CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security

Y2 - 4 October 2010 through 8 October 2010

ER -

Losing control of the Internet: Using the data plane to attack the control plane

Abstract

Publication series

Other

Keywords

Publisher link

Find It

Other files and links

Fingerprint

Cite this