[129326] in North American Network Operators' Group
Re: ISP port blocking practice
daemon@ATHENA.MIT.EDU (Zhiyun Qian)
Thu Sep 2 22:17:58 2010
From: Zhiyun Qian <zhiyunq@umich.edu>
In-Reply-To: <AANLkTi=Vc-EGJwkOSkk7MronFWap9kbuRsrHdjMqfgck@mail.gmail.com>
Date: Thu, 2 Sep 2010 21:17:47 -0500
To: Suresh Ramasubramanian <ops.lists@gmail.com>
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Suresh, thanks for your interest. I see you've had a lot of experience =
in fighting spam, so you must have known this. Yes, I know this spamming =
technique has been around for a while. But it's surprising to see that =
the majority of the ISPs that we studied are still vulnerable to this =
attack. That probably indicates that it is not as widely known as we =
would expect. So I thought it would be beneficial to raise the awareness =
of the problem.=20
In terms of more results, the paper is the most detailed document we =
have. Otherwise, if you interested in the data that we collected (which =
ISPs or IP ranges are vulnerable to this attack). We can chat offline.
Regards.
-Zhiyun
On Sep 2, 2010, at 8:19 PM, Suresh Ramasubramanian wrote:
> Zhiyun, this is by far the most comprehensive paper I've seen on
> asymmetric routing spam .. a technique that's as old as, for example,
> Alan Ralsky. So been around for about a decade.
>=20
> Congratulations, great effort. Do you have more results available (in
> more detail than were published in this paper)? Should be worth
> seeing.
>=20
> thanks
> --srs
>=20
> On Fri, Sep 3, 2010 at 3:29 AM, Zhiyun Qian <zhiyunq@umich.edu> wrote:
>> Sorry for bringing this old topic back. But we have made some =
academic effort investigating the spamming behaviors using assymetric =
routing (we named it "triangualr spamming"). This work appeared in this =
year's IEEE Security & Privacy conference. You can take a look at it if =
you are interested (and feedbacks are welcome):
>>=20
>> =
http://www.eecs.umich.edu/~zhiyunq/pub/oakland10_triangular-spamming.pdf
>=20
>=20
>=20
> --=20
> Suresh Ramasubramanian (ops.lists@gmail.com)
>=20
>=20
