Name: draft-atwood-pim-sm-linklocal-00
Title: Security Issues in PIM-SM Link-local Messages
State: Active
Authors: John Atwood
Group: Individual Submissions (none)
Date: 2004-10-19
This document proposes some modifications to the Internet-Draft for
Protocol Independent Multicast - Sparse Mode (PIM-SM) Protocol regarding
security issues of its link-local messages. To protect these link-local
messages, in the Internet-Draft for PIM-SM a security mechanism has been
proposed that uses the IPsec Authentication Header (AH) protocol. While
using IPsec AH protocol, the anti-replay mechanism has been disabled. This
compromise makes PIM-SM vulnerable to Denial of Service (DoS) attack. In
this document, a new proposal is presented to protect PIM link-local
messages while activating the anti-replay mechanism as well. This proposal
builds on the new Security Association lookup method that has been
specified in the Internet-Draft that revises the AH protocol.
[sh-index] Back to list of manuals
|
| |
