Ke Zhang, University of California at Davis
We have built a router testbed that is connected to the Deter/Emist experimental infrastructure. Our goal is to create a semi-realistic testbed to conduct BGP experiments, measure and visualize their impact on network performance and stability. Such testbed is also useful for evaluating different security countermeasures. Our testbed architecture includes four components: routing topology, background traffic, data analysis and visualization. This paper describes how we launch two specific BGP attacks, (a) Multiple Origin AS and (b) route flap damping attacks, and the lessons learned.
Citation:
Ke Zhang, Soon-Tee Teoh, Shih-Ming Tseng, Rattapon Limprasittipom, Kwan-Liu Ma, S. Felix Wu, Chen-Nee Chuah, "Performing BGP Experiments on a Semi-realistic Internet Testbed Environment," icdcsw, vol. 2, pp.130-136, Second International Workshop on Security in Distributed Computing Systems (SDCS) (ICDCSW'05), 2005