North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: BGP Security

  • From: Steven M. Bellovin
  • Date: Sun Nov 27 10:48:50 2005

In message <[email protected]>, Kaustubh Atrawalkar writes:
>
>I am working over BGP security. Trying to guard router itself rather 
>than trying to find the attacker. I am placing the module to test the 
>UPDATE message before the formation of Adj-RIB-out. So that the false / 
>malicious information wont go beyond my router and so that my router and 
>the next hops will be free from attack. Would like to know ur views 
>about this approach.
>
The problem is knowing that the input information is malicious -- how 
can you tell?

		--Steven M. Bellovin, http://www.cs.columbia.edu/~smb