Hop integrity in computer networks

A computer network is said to provide hop integrity if, when any router, p, in the network receives a message, m, supposedly from an adjacent router, q, then p can check that m was indeed sent by q, was not modified after it was sent and was not a replay of an old message sent from q to p. We descri...

Full description

Saved in:
Bibliographic Details
Published in:IEEE/ACM transactions on networking 2002-06, Vol.10 (3), p.308-319
Main Authors: Gouda, M.G., Elnozahy, E.N., Chin-Tser Huang, McGuire, T.M.
Format: Article
Language:English
Subjects:
Access protocols
Computer crime
Computer networks
Computer science education
Educational programs
Integrity
Intelligent networks
Internet
IP networks
Messages
Networks
Protocol (computers)
Routers
System software
TCPIP
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:A computer network is said to provide hop integrity if, when any router, p, in the network receives a message, m, supposedly from an adjacent router, q, then p can check that m was indeed sent by q, was not modified after it was sent and was not a replay of an old message sent from q to p. We describe three protocols that can be added to the routers in a computer network so that the network can provide hop integrity, and thus overcome most denial-of-service attacks. These three protocols are a secret exchange protocol, a weak integrity protocol and a strong integrity protocol. All three protocols are stateless, require small overhead and do not constrain the network protocol in the routers in any way.
ISSN:1063-6692
1558-2566
DOI:10.1109/TNET.2002.1012363