Securing the Control-plane Channel and Cache of Pull-based ID/LOC Protocols
Networking and Internet Architecture
2018-03-26 v1
Abstract
Pull-based ID/LOC split protocols, such as LISP (RFC6830), retrieve mappings from a mapping system to encapsulate and forward packets. This is done by means of a control-plane channel. In this short paper we describe three attacks against this channel (Denial-of-Service and overflowing) as well as the against the local cache used to store such mappings. We also provide a solution against such attacks that implements a per-source rate-limiter using a Count-Min Sketch data-structure.
Keywords
Cite
@article{arxiv.1803.08568,
title = {Securing the Control-plane Channel and Cache of Pull-based ID/LOC Protocols},
author = {Paul Almasan and Jordi Paillisse and Alberto Rodriguez-Natal and Pere Barlet-Ros and Florin Coras and Vina Ermagan and Fabio Maino and Albert Cabellos-Aparicio},
journal= {arXiv preprint arXiv:1803.08568},
year = {2018}
}