Analysis of security threats to MPLS virtual private networks

Denise Grayson, Daniel Guernsey, Jonathan Butts, Michael Spainhower and Sujeet Shenoi

International Journal of Critical Infrastructure Protection, 2009, vol. 2, issue 4, 146-153

Abstract: Multiprotocol label switching (MPLS) based virtual private networking is one of the fastest-growing network technologies. It provides corporate and government customers with flexible, inexpensive “autobahns” that seamlessly connect multiple, geographically-dispersed sites, enabling voice, video, data and other high-bandwidth applications. The technology is also attractive to service providers because it enables them to flexibly provision resources for a variety of classes of service and applications with excellent quality of service at low cost. This paper analyzes the principal security threats to MPLS virtual private networks (VPNs). Because BGP is crucial to implementing MPLS VPNs, special attention is directed at the protocol and its multiprotocol extensions. This paper describes three classes of exploits on MPLS VPNs: route modification, traffic injection and denial-of-service attacks. It also discusses mitigation strategies that can be implemented by service providers and MPLS VPN customers.

Keywords: Multiprotocol label switching; Virtual private networks; Security analysis (search for similar items in EconPapers)
Date: 2009
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (2)

Downloads: (external link)
http://www.sciencedirect.com/science/article/pii/S1874548209000237
Full text for ScienceDirect subscribers only

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:eee:ijocip:v:2:y:2009:i:4:p:146-153

DOI: 10.1016/j.ijcip.2009.08.002

Access Statistics for this article

International Journal of Critical Infrastructure Protection is currently edited by Leon Strous

More articles in International Journal of Critical Infrastructure Protection from Elsevier
Bibliographic data for series maintained by Catherine Liu ().