Real-Time Security Exercises on a Realistic Interdomain Routing Experiment Platform

We use a realistic interdomain routing experiment platform to conduct real-time attack and defense exercises,for training purposes. Our interdomain routing experiment platform integrates open-source router software, real-time network simulation, and light-weight machine virtualization technologies, and is capable of supporting realistic large-scale touting experiments. The network model used consists of major autonomous systems connecting Swedish Internet users with realistic muting configurations derived from the routing registry. We conduct a series of real-time security exercises on this routing system to study the consequence of intentionally propagating false routing information on interdomain routing and the effectiveness of corresponding defensive measures. We describe three kinds of simplistic BGP attacks in the context of security exercises designed specifically for training purposes. While an attacker can launch attacks from a compromised router by changing its routing policies, administrators will be able to observe the adverse effect of these attacks and subsequently apply appropriate defensive measures to mitigate their impact, such as installing filtering rules. These exercises, all carried out in real time, demonstrate the feasibility of large-scale realistic routing experiments using the real-time routing experiment platform.