New Results for the PTB-PTS Attack on Tunneling Gateways - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2015

New Results for the PTB-PTS Attack on Tunneling Gateways

Résumé

This work analyzes the impacts of the ”Packet Too Big”- ”Packet Too Small” (PTB-PTS) Internet Control Message Protocol (ICMP) based attack against tunneling gateways. It is a follow up of a prior work [2] that detailed how to launch the PTB-PTS attack against IPsec gate- ways (for secure tunnels) and their consequences, ranging from major performance impacts (additional delays at session establishment and/or packet fragmentation) to Denial of Services (DoS). In the present work we examine a much wider range of configurations: we now consider the two IP protocol versions (previous work was lim- ited to IPv4, we add IPv6), two operating systems (previous work was limited to Linux Debian, we add a recent Ubuntu distribution as well as Windows 7), and two tunnelling protocols (previous work was limited to IPsec, we add IPIP). This work highlights the complexity of the situation as different behav- iors will be observed depending on the exact configuration. It also high- lights Microsoft’s strategy when approaching the ”minimum maximum packet size” (i.e., minimum MTU) any link technology should support: if Windows 7 mitigates the attack in IPv4 (there is no DoS), however the performance impact remains, and since the technique is inapplicable to IPv6, the attack succeeds in that case. Finally, this work highlights a fundamental problem: the impossibility to reliably identify illegitimate ICMP error packets coming from the untrusted network.
Fichier principal
Vignette du fichier
GreHack15_ptb_pts_attack_VR.pdf (1.17 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-01245629 , version 1 (17-12-2015)
hal-01245629 , version 2 (20-05-2016)

Licence

Paternité - Pas d'utilisation commerciale - Partage selon les Conditions Initiales

Identifiants

  • HAL Id : hal-01245629 , version 1

Citer

Vincent Roca, Ludovic Jacquin, Saikou Fall, Jean-Louis Roch. New Results for the PTB-PTS Attack on Tunneling Gateways. GreHack 2015, Cédric Lauradoux, Florent Autréau, Nov 2015, Grenoble, France. ⟨hal-01245629v1⟩
677 Consultations
201 Téléchargements

Partager

Gmail Facebook X LinkedIn More