TY - GEN
T1 - Internet access denial by higher-tier ISPs
T2 - A nat-based solution
AU - Al-Baiz, Abdulaziz
AU - Abu-Amara, Marwan
AU - Mahmoud, Ashraf
AU - Sqalli, Mohammed H.
AU - Azzedin, Farag
PY - 2011
Y1 - 2011
N2 - The Internet is an interconnection of Autonomous Systems (ASes) of which many are controlled by Internet Service Providers (ISPs). ASes use Border Gateway Protocol (BGP) to communicate routing information to each other. BGP does not allow a network to control how its traffic is routed. As a result, traffic belonging to a specific network can be intentionally dropped as it is routed by BGP through a malicious ISP; a behavior we define as Internet access denial. The impact of Internet access denial, especially when performed by higher-tier ISPs, can be severe. In this paper, Network Address Translation (NAT) is used as a solution to overcome the Internet access denial problem by hiding the traffic identity. The proposed solution is scalable to fit large networks, by using pools of IP addresses across several NAT routers. Under high network load, the performance degradation of introducing NAT on the end-to-end delay and throughput is at most 0.2% and 0.3%, respectively.
AB - The Internet is an interconnection of Autonomous Systems (ASes) of which many are controlled by Internet Service Providers (ISPs). ASes use Border Gateway Protocol (BGP) to communicate routing information to each other. BGP does not allow a network to control how its traffic is routed. As a result, traffic belonging to a specific network can be intentionally dropped as it is routed by BGP through a malicious ISP; a behavior we define as Internet access denial. The impact of Internet access denial, especially when performed by higher-tier ISPs, can be severe. In this paper, Network Address Translation (NAT) is used as a solution to overcome the Internet access denial problem by hiding the traffic identity. The proposed solution is scalable to fit large networks, by using pools of IP addresses across several NAT routers. Under high network load, the performance degradation of introducing NAT on the end-to-end delay and throughput is at most 0.2% and 0.3%, respectively.
KW - Internet access denial
KW - NAT
KW - OPNET
KW - higher-tier ISP
KW - traffic identity hiding
UR - http://www.scopus.com/inward/record.url?scp=80053982305&partnerID=8YFLogxK
U2 - 10.1109/CCECE.2011.6030611
DO - 10.1109/CCECE.2011.6030611
M3 - Conference contribution
AN - SCOPUS:80053982305
SN - 9781424497898
T3 - Canadian Conference on Electrical and Computer Engineering
SP - 1004
EP - 1008
BT - 2011 Canadian Conference on Electrical and Computer Engineering, CCECE 2011
ER -
