Intrusion Detection for Link-State Routing Protocols

Security and intrusion detection for routing protocols are two closely related topics in the protection of network infrastructure. The former focuses on secure network control protocols, while the latter is in the area of network security management. In this paper, we study the integration of these two areas: control and management. We take OSPF, a link-state routing protocol, as a target example to demonstrate the advantages for this integrated architecture. We will also show some preliminary implementation results. 1 Introduction Security and intrusion detection for routing protocols are two closely related topics in the protection of network infrastructure. The former focuses on secure network control protocols (control plane), while the latter is in the area of network security management (management plane). In most cases, we have considered these two issues independently. For example, while developing the security mechanism for the MobileIP protocol, we have hardly worried about ..