TY - GEN
T1 - Prototyping and evaluating a tunnel-based solution to circumvent malicious IISP blocking
AU - Al-Ghadhban, Amer
AU - Abu-Amara, Marwan H.
PY - 2012
Y1 - 2012
N2 - Recently, the Internet is essential in providing numerous services to different types of users. Preventing the users from accessing these services has a serious impact on the daily life of the user. In this paper we considered a scenario wherein a specific region is maliciously denied from accessing the Internet by a single upstream International Internet Service Provider (IISP). Assuming the availability of a cooperative AS, we prototype and evaluate a tunnel-based solution proposed by M. Abu-Amara [1]. The prototyping is conducted in a real laboratory designed and configured to be close to the Internet's ASes connectivity structure. Different tunneling protocols are examined with different Internet applications and background traffic loads. The prototyping proves the ability of the tunneling techniques in circumventing the Internet access denial performed by the malicious IISP. In addition, the IP-in-IP tunneling technique has shown the lowest end-to-end delay and traffic overhead.
AB - Recently, the Internet is essential in providing numerous services to different types of users. Preventing the users from accessing these services has a serious impact on the daily life of the user. In this paper we considered a scenario wherein a specific region is maliciously denied from accessing the Internet by a single upstream International Internet Service Provider (IISP). Assuming the availability of a cooperative AS, we prototype and evaluate a tunnel-based solution proposed by M. Abu-Amara [1]. The prototyping is conducted in a real laboratory designed and configured to be close to the Internet's ASes connectivity structure. Different tunneling protocols are examined with different Internet applications and background traffic loads. The prototyping proves the ability of the tunneling techniques in circumventing the Internet access denial performed by the malicious IISP. In addition, the IP-in-IP tunneling technique has shown the lowest end-to-end delay and traffic overhead.
KW - IISP blocking and countermeasures
KW - Network security
KW - performance of tunneling protocol
KW - the circumventing Internet access denial
UR - https://www.scopus.com/pages/publications/84867390203
U2 - 10.1109/ICCITechnol.2012.6285810
DO - 10.1109/ICCITechnol.2012.6285810
M3 - Conference contribution
AN - SCOPUS:84867390203
SN - 9781467319508
T3 - International Conference on Communications and Information Technology - Proceedings
SP - 286
EP - 290
BT - 2012 International Conference on Communications and Information Technology, ICCIT 2012
ER -
