Proceedings of the 2006 IEEE International Conference on Network Protocols
Mitigating Attacks Against Measurement-Based Adaptation Mechanisms in Unstructured Multicast Overlay Networks
Fess parker's Doubletree, Santa Barbara, Ca, USA
November 12-November 15
ISBN: 1-4244-0593-9
AAron Walters, Department of Computer Science and CERIAS, Purdue University, 305 N. University St., West Lafayette, IN 47907 USA. arwalter@cs.purdue.edu
David Zage, Department of Computer Science and CERIAS, Purdue University, 305 N. University St., West Lafayette, IN 47907 USA. zagedj@cs.purdue.edu
Cristina Nita-Rotaru, Department of Computer Science and CERIAS, Purdue University, 305 N. University St., West Lafayette, IN 47907 USA. crisn@cs.purdue.edu
Many multicast overlay networks maintain application-specific performance goals such as bandwidth, latency, jitter and loss rate by dynamically changing the overlay structure using measurement-based adaptation mechanisms. This results in an unstructured overlay where no neighbor selection constraints are imposed. Although such networks provide resilience to benign failures, they are susceptible to attacks conducted by adversaries that compromise overlay nodes. Previous defense solutions proposed to address attacks against overlay networks rely on strong organizational constraints and are not effective for unstructured overlays. In this work, we identify, demonstrate and mitigate insider attacks against measurement-based adaptation mechanisms in unstructured multicast overlay networks. The attacks target the overlay network construction, maintenance, and availability and allow malicious nodes to control significant traffic in the network, facilitating selective forwarding, traffic analysis, and overlay partitioning. We propose techniques to decrease the number of incorrect or unnecessary adaptations by using outlier detection. We demonstrate the attacks and mitigation techniques in the context of a mature, operationally deployed overlay multicast system, ESM, through real-life deployments and emulations conducted on the PlanetLab and DETER testbeds, respectively.
Citation:
AAron Walters, David Zage, Cristina Nita-Rotaru, "Mitigating Attacks Against Measurement-Based Adaptation Mechanisms in Unstructured Multicast Overlay Networks," icnp, pp.65-74, Proceedings of the 2006 IEEE International Conference on Network Protocols, 2006