Penetration Testing mailing list archives

[PEN-TEST] Routing Protocol security paper now available


From: "NetW3.COM Consulting" <netw3 () NETW3 COM>
Date: Fri, 15 Dec 2000 17:59:14 -0600

My paper "Protecting Network Infrastructure at the Protocol Level"
(written for a SANS certification) is now finished (V1.0 at least)
and you may find it useful and informative. It's basically the result
of a lot of research on routing protocol insecurities and attack/defense
methods. I had a hard time finding any one document that went over the
known problems with routing protocols such as RIP, BGP, OSPF, etc. so
this is my attempt at making one.

I have to thank several people from this list, such as Batz, FX,
Sebastion, J. Oqendo and others for their asssistance.

"Protecting Network Infrastructure at the Protocol Level" can be found
in MS-word format at http://www.netw3.com/documents.html and I would be
glad to accept corrections or suggestions for the next revision.

A future ideas for a document includes Cisco routing protocol attacks
and defenses, which would go over all of the cisco specific protocols.
I am a long way from being able to put something like this together.

Anyone have an extra cisco router with two ethernet interfaces just
laying around that they'd care to donate for research purposes? :)

Thanks,
Curt Wilson




=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
| Curt R. Wilson   *   NetW3.COM Consulting    www.netw3.com  |
|    Internet Security, Networking, PC tech,  WWW hosting     |
|  Serving Southern Illinois locally and the world virtually  |
|            netw3 () netw3 com     618-353-7418                 |
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


Current thread: