A Study on Router Security with OSPF Routing Protocol

• Main Authors: Hwei-Kai Chang, 張惠凱
• Other Authors: Wen-Nung Tsai
• Format: Others
• Language: zh-TW
• Published: 2001
• Online Access: http://ndltd.ncl.edu.tw/handle/15901495069924964216

碩士 === 國立交通大學 === 資訊工程系 === 89 === Router is very important in the network. And then it is very likely to be attacked by attackers. An attacker in control of a router can disrupt communication by dropping packets or modifying network link state. This thesis present a router attack detection system witch can detect router attacks. In this thesis, we investigate OSPF routing protocol and study the router security. We proposed an attack detection system for router protection. Our attack detection system is based on the principle of conservation of flow in a network: all packets sent into a node and not destined for that node are expected to exit the node. We use this principle to detect router flow attacks and use a finite state machine to detect LSA attack. And we simulate our attack detection system to ensure the correctness of the system and analyze the simulation results. We use attack detection system security model witch presented by B.C. Soh and T. C.Dillion to discuss how to set threshold in our attack detection system.