loading...
Securing MPLS Networks with Multi-path Routing
Las Vegas, Nevada, USA April 02-April 04
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ITNG.2007.176International Conference on Informati ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Sahel Alouneh, Concordia University, Canada
Abdeslam En-Nouaary, Concordia University, Canada
Anjali Agarwal, Concordia University, Canada
MPLS network architecture does not protect the confidentiality of data transmitted. This paper proposes a mechanism to enhance the security in MPLS networks by using multi-path routing combined with a modified (k, n) Threshold Secret Sharing scheme. An IP packet entering MPLS ingress router can be partitioned into n shadow (share) packets, which are then assigned to maximally-node disjoint paths across the MPLS network. The egress router at the end will be able to reconstruct the original IP packet if it receives any k share packets. The attacker must therefore tap at least k paths to be able to reconstruct the original IP packet that is being transmitted, while receiving k-1 or less of share packets makes it hard or even impossible to reconstruct the original IP packet.
Citation:
Sahel Alouneh, Abdeslam En-Nouaary, Anjali Agarwal, "Securing MPLS Networks with Multi-path Routing," itng, pp.809-814, International Conference on Information Technology (ITNG'07), 2007
Usage of this product signifies your acceptance of the Terms of Use.