On the Prevention of Invalid Route Injection Attack

Overview & Synopsis

In recent years, the Internet is suffering from severe attacks from the global routing system, such as prefix hijack, digital cannon. These attacks break down network services and sabotage infrastructures. In this paper, we present a novel attack on route control plane—invalid route injection, and simulate the attack by adding controlled software routers in the stub and check the resource consumptions of routers before and after the attack. The experimental results demonstrate that invalid route injection can bring severe damage to routers in the Internet. Based on the analysis of the results, we discuss the prevention of the attack and propose some effective protection and countermeasures to the attack.