| Presentation | 2015-03-03 Measures to Prevent Cyber-Attack Using Multi-Layer-Binding (MLB) Router : A Proposal of Dropping Request Protocol, and its Implementation and Evaluation Using OpenFlow Ken EGUCHI, Shota NAGATOMO, Yuji YOKOYAMA, Kaoru SANO, Hirofumi YAMAKI, Yoichiro UENO, Hiroshi KOBAYASHI, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | There is a limit to the security achieved by traditional approaches that rely on the defense of individual systems, and cooperation among Internet operators and users over the world is required. As a potential solution, the multi-layer-binding (MLB) router aims at preventing outflow and inflow of cyber-attack packets to the Internet has been proposed. It has the following key features; (1) The MLB router registers the pair of the IP and the MAC addresses into an MLB table, using the connection requested port as the key of the entry. When the router receives a packet, it searches the MLB table using the port that received the packet as the key. If the pair of source the DP and the MAC addresses does not exist, the router discards the packet regarding it as a spoofed IP packet. (2) After receiving dropping requests from other nodes, the MLB router discards the corresponding non-IP spoofed attack packets or anonymous address packets. This paper pertains to dropping request. First, we propose a protocol to discover the MLB routers that should send out dropping requests, from all MLB routers scattering around the world, and to send valid dropping request messages to the corresponding MLB routers. Next, we build a test-bed installed with a framework of the dropping request protocol by using OpenFlow, and conduct a cyber-attack experiment that mimics a targeted attack. The results show that 230 milliseconds after the attack is detected, the inflow of the attack packets into the Internet as well as the outflow of an information-leaking packets from the victim's node was prevented. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | measure for cyber-attack / multi-layer-binding router / MLB router / dropping request protocol / OpenFlow |
| Paper # | ICSS2014-65 |
| Date of Issue |
| Conference Information | |
| Committee | ICSS |
|---|---|
| Conference Date | 2015/2/24(1days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | |
| Chair | |
| Vice Chair | |
| Secretary | |
| Assistant | |
| Paper Information | |
| Registration To | Information and Communication System Security (ICSS) |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | Measures to Prevent Cyber-Attack Using Multi-Layer-Binding (MLB) Router : A Proposal of Dropping Request Protocol, and its Implementation and Evaluation Using OpenFlow |
| Sub Title (in English) | |
| Keyword(1) | measure for cyber-attack |
| Keyword(2) | multi-layer-binding router |
| Keyword(3) | MLB router |
| Keyword(4) | dropping request protocol |
| Keyword(5) | OpenFlow |
| 1st Author's Name | Ken EGUCHI |
| 1st Author's Affiliation | School of Information Environment, Tokyo Denki University() |
| 2nd Author's Name | Shota NAGATOMO |
| 2nd Author's Affiliation | School of Information Environment, Tokyo Denki University |
| 3rd Author's Name | Yuji YOKOYAMA |
| 3rd Author's Affiliation | School of Information Environment, Tokyo Denki University |
| 4th Author's Name | Kaoru SANO |
| 4th Author's Affiliation | School of Information Environment, Tokyo Denki University |
| 5th Author's Name | Hirofumi YAMAKI |
| 5th Author's Affiliation | School of Information Environment, Tokyo Denki University |
| 6th Author's Name | Yoichiro UENO |
| 6th Author's Affiliation | School of Information Environment, Tokyo Denki University |
| 7th Author's Name | Hiroshi KOBAYASHI |
| 7th Author's Affiliation | School of Information Environment, Tokyo Denki University |
| Date | 2015-03-03 |
| Paper # | ICSS2014-65 |
| Volume (vol) | vol.114 |
| Number (no) | 489 |
| Page | pp.pp.- |
| #Pages | 6 |
| Date of Issue | |