Penetration Testing mailing list archives
[PEN-TEST] Routing Protocol security paper now available
From: "NetW3.COM Consulting" <netw3 () NETW3 COM>
Date: Fri, 15 Dec 2000 17:59:14 -0600
My paper "Protecting Network Infrastructure at the Protocol Level" (written for a SANS certification) is now finished (V1.0 at least) and you may find it useful and informative. It's basically the result of a lot of research on routing protocol insecurities and attack/defense methods. I had a hard time finding any one document that went over the known problems with routing protocols such as RIP, BGP, OSPF, etc. so this is my attempt at making one. I have to thank several people from this list, such as Batz, FX, Sebastion, J. Oqendo and others for their asssistance. "Protecting Network Infrastructure at the Protocol Level" can be found in MS-word format at http://www.netw3.com/documents.html and I would be glad to accept corrections or suggestions for the next revision. A future ideas for a document includes Cisco routing protocol attacks and defenses, which would go over all of the cisco specific protocols. I am a long way from being able to put something like this together. Anyone have an extra cisco router with two ethernet interfaces just laying around that they'd care to donate for research purposes? :) Thanks, Curt Wilson =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= | Curt R. Wilson * NetW3.COM Consulting www.netw3.com | | Internet Security, Networking, PC tech, WWW hosting | | Serving Southern Illinois locally and the world virtually | | netw3 () netw3 com 618-353-7418 | =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Current thread:
- [PEN-TEST] Pen-Testing AS/400 Enno Rey (Dec 13)
- Re: [PEN-TEST] Pen-Testing AS/400 Eric (Dec 13)
- <Possible follow-ups>
- Re: [PEN-TEST] Pen-Testing AS/400 David Jahne (Dec 13)
- Re: [PEN-TEST] Pen-Testing AS/400 Joe Traietta (Dec 13)
- Re: [PEN-TEST] Pen-Testing AS/400 Walsh, John (Dec 13)
- [PEN-TEST] Pen-Testing AS/400 Mike Ahern (Dec 13)
- Re: [PEN-TEST] Pen-Testing AS/400 Mary Galligan (Dec 15)
- Re: [PEN-TEST] Pen-Testing AS/400 David Knaack (Dec 15)
- Re: [PEN-TEST] Pen-Testing AS/400 Enno Rey (Dec 15)
- [PEN-TEST] Routing Protocol security paper now available NetW3.COM Consulting (Dec 16)
- Re: [PEN-TEST] Routing Protocol security paper now available Arthur Clune (Dec 19)
- Re: [PEN-TEST] Routing Protocol security paper now available Nicolas GREGOIRE (Dec 20)
- Re: [PEN-TEST] Pen-Testing AS/400 Mary Galligan (Dec 15)