使用互联网密钥交换协议的拒绝服务攻击

2008 5th IEEE Consumer Communications and Networking Conference Pub Date : 2008-02-01 DOI:10.1109/CCNC08.2007.111

Prashant Dewan, Divya Naidu Kolar Sunder, David M. Durham

{"title":"使用互联网密钥交换协议的拒绝服务攻击","authors":"Prashant Dewan, Divya Naidu Kolar Sunder, David M. Durham","doi":"10.1109/CCNC08.2007.111","DOIUrl":null,"url":null,"abstract":"In this paper we answer two questions: 1) How can an attacker push the CPU utilization of a state-of-art Internet Key Exchange (IKE) responders to 100% thereby inflecting a Denial of Service (DoS) attack and 2) What are the mitigation mechanisms that can be deployed on IP networks without modifying the protocol? We emulated the DoS attacks in our test lab. We outline our experiments and present the results.","PeriodicalId":183858,"journal":{"name":"2008 5th IEEE Consumer Communications and Networking Conference","volume":"121 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2008-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"6","resultStr":"{\"title\":\"Denial of Service Attacks Using Internet Key Exchange Protocol\",\"authors\":\"Prashant Dewan, Divya Naidu Kolar Sunder, David M. Durham\",\"doi\":\"10.1109/CCNC08.2007.111\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"In this paper we answer two questions: 1) How can an attacker push the CPU utilization of a state-of-art Internet Key Exchange (IKE) responders to 100% thereby inflecting a Denial of Service (DoS) attack and 2) What are the mitigation mechanisms that can be deployed on IP networks without modifying the protocol? We emulated the DoS attacks in our test lab. We outline our experiments and present the results.\",\"PeriodicalId\":183858,\"journal\":{\"name\":\"2008 5th IEEE Consumer Communications and Networking Conference\",\"volume\":\"121 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2008-02-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"6\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2008 5th IEEE Consumer Communications and Networking Conference\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/CCNC08.2007.111\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2008 5th IEEE Consumer Communications and Networking Conference","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/CCNC08.2007.111","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 6

摘要

在本文中，我们回答了两个问题:1)攻击者如何将最先进的互联网密钥交换(IKE)响应器的CPU利用率提高到100%，从而影响拒绝服务(DoS)攻击;2)在不修改协议的情况下可以在IP网络上部署的缓解机制是什么?我们在测试实验室中模拟了DoS攻击。我们概述了我们的实验并提出了结果。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

Denial of Service Attacks Using Internet Key Exchange Protocol

In this paper we answer two questions: 1) How can an attacker push the CPU utilization of a state-of-art Internet Key Exchange (IKE) responders to 100% thereby inflecting a Denial of Service (DoS) attack and 2) What are the mitigation mechanisms that can be deployed on IP networks without modifying the protocol? We emulated the DoS attacks in our test lab. We outline our experiments and present the results.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

2008 5th IEEE Consumer Communications and Networking Conference

自引率

0.00%

发文量