论文信息 - DoS Vulnerability Verification of IPSec VPN

DoS Vulnerability Verification of IPSec VPN

This paper analyzes the vulnerability in the process of key negotiation between the main mode and aggressive mode of IKEv1 protocol in IPSec VPN, and proposes a DOS attack method based on OSPF protocol adjacent route spoofing. The experiment verifies the insecurity of IPSec VPN using IKEv1 protocol. This attack method has the advantages of lower cost and easier operation compared with using botnet.

Yimin Zhou | Kai Zhang | Kai Zhang | Yiming Zhou

[1] G. Shobha,et al. Performance analysis of OSPF and EIGRP routing protocols for greener internetworking , 2013, 2013 International Conference on Green High Performance Computing (ICGHPC).

[2] 白英彩,et al. Two Modifications on IKE Protocol with Pre-shared Key Authentication , 2003 .

[3] Chandan N Bhagwat,et al. Performance Analysis of OSPF and EIGRP Routing Protocols for Greener Internetworking , 2013 .

[4] Lu Shiwen. Simplification and Security Analysis of IKE Protocol , 2006 .

[5] Cui Xiang,et al. Study of Botnets Trends , 2016 .

[6] Luo Zhiyong,et al. Application of VPN Technology in Multi-campus Adult Education Platform , 2014, 2014 7th International Conference on Control and Automation.

[7] Wang Feng-ling. Study on Application of VPN Technology Based on IPSec , 2012 .

[8] Fan Hong. An Internet Key Exchange Protocol and Its Security Analysis , 2003 .

[9] Kenneth G. Paterson. A cryptographic tour of the IPsec standards , 2006, Inf. Secur. Tech. Rep..

[10] Zhang Yong-ping. Research of Main Mode with a Pre-Shared Key in IKE Protocol , 2007 .

[11] W. Douglas Maughan,et al. Internet Security Association and Key Management Protocol (ISAKMP) , 1998, RFC.