Hop Count Measurement Between Autonomous Systems Using a Combination of Active and Passive Monitoring

Rahmatov, Nematullo; Kim, Hyenwoo; Essaid, Meryam; Qurbonov, Shuhration; Ju, Hongtaek; Pak, Wooguil

doi:10.1109/icufn.2018.8436953

Cited by 1 publication

(2 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As in many cases, network organizations install a software in the PE router called firewall. In previous study the author identified three problems to not being analogous to routing with combined active and passive monitoring while sending traceroute from the source AS to target ASs 10 . Due to frequent changes in AS routing policy, we want to examine if any other changes existed in the novel AS routing policy.…”

Section: Introductionmentioning

confidence: 99%

“…However, using web IP addresses instead of DNS IP addresses is not an effective strategy for discovering PE router IP addresses of the target AS, because it does not constantly keep web servers in the target ASs. Generally, for DNS IP addresses and web IP addresses of any ASs had the problems of firewall system blocking and AS path prepending while searching IP addresses 10 . However, if the firewall blocks several hops in the target AS while sending ICMP command via traceroute tool, deriving accurate RTT information and PE router IP addresses of the target AS becomes impossible.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Analysis of the vulnerability estimation and neighbor value prediction in autonomous systems

Rahmatov

Saeed

Paul

2022

Sci Rep

View full text Add to dashboard Cite

The security within autonomous systems (AS)s is one of the important measures to keep network users safe and stable from the various type of Distributed Denial of Service (DDoS) attacks. Similar to the other existing attack types Internet control message protocol (ICMP) based attacks are remained open challenge on the Internet environment. In this study, we have proposed a method to estimate the vulnerability of 600 AS provider edge (PE) routers by sending ICMP packets and predicted AS neighbor values using least square regression (LSR) approach. The results of our study show that 265 AS PE routers are vulnerable due to ICMP flood attack from the 600 ASs which were analyzed. Additionally, we have predicted that about 60% of total AS neighbors will be reduced in the next 3 years. Our results indicate that some ASs still did not deploy the firewall system in the boundary of their networks. Similarly, we also observed that the majority of ASs which expected to have less neighbor values in the next 3 years is due to change their routing paths to find adjacent paths.

show abstract

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%