Securing Internet Coordinate System: Embedding Phase

Abstract : This paper addresses the issue of the security of Internet Coordinate Systems, by proposing a general method for malicious behavior detection during coordinate computations. We first show that the dynamics of a node, in a coordinate system without abnormal or malicious behavior, can be modeled by a Linear State Space model and tracked by a Kalman filter. Then we show, that the obtained model can be generalized in the sense that the parameters of a filter calibrated at a node can be used effectively to model and predict the dynamic behavior at another node, as long as the two nodes are not too far apart in the network. This leads to the proposal of a Surveyor infrastructure: Surveyor nodes are trusted, honest nodes that use each other exclusively to position themselves in the coordinate space, and are therefore immune to malicious behavior in the system. During their own coordinate embedding, other nodes can then use the filter parameters of a nearby Surveyor as a representation of normal, clean system behavior to detect and filter out abnormal or malicious activity. A combination of simulations and Planet- Lab experiments are used to demonstrate the validity, generality, and effectiveness of the proposed approach for two representative coordinate embedding systems, namely Vivaldi and NPS.
Complete list of metadatas

Cited literature [19 references]  Display  Hide  Download

https://hal.inria.fr/inria-00151257
Contributor : Mohamed Ali Kaafar <>
Submitted on : Saturday, June 2, 2007 - 10:18:51 AM
Last modification on : Thursday, November 29, 2018 - 1:26:34 AM
Long-term archiving on : Thursday, April 8, 2010 - 6:46:20 PM

Files

coordinates-reparation.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : inria-00151257, version 1

Collections

Citation

Mohamed Ali Kaafar, Laurent Mathy, Chadi Barakat, Kavé Salamatian, Thierry Turletti, et al.. Securing Internet Coordinate System: Embedding Phase. [Technical Report] 2007. ⟨inria-00151257⟩

Share

Metrics

Record views

465

Files downloads

252