Pp. 95–106 of the Proceedings

Next: 1 Introduction

Abstract

• Abstract
• 1 Introduction
• 2 Attacks on ``Classical IP over ATM Networks''
  • 2.1 IP Spoofing over ATM Connections
  • 2.2 `Denial of Service' by Allocating IP Addresses of a LIS
  • 2.3 `Man in the Middle' Attacks
  • 2.4 `Denial of Service' due to Bandwidth Allocation
  • 2.5 `Denial of Service' due to Excessive Connection Establishment
  • 2.6 ILMI based Attacks
    • Example: Simulating an ATM Switch
  • 2.7 Attacks on ATM Switches
• 3 Solutions
  • 3.1 Securing the ATMARP Service
    • Configuration of an ATMARP Server
    • Configuring static ARP Entries
    • Auditing of ATMARP Queries
    • Open Issue
  • 3.2 Integration of the Switch into a Firewall Concept
    • 3.2.1 Access Control on Signaling
    • 3.2.2 Sample Configuration for a Cisco LS 1010 Switch
      • Definition of Symbolic Names for ATM Addresses
      • Definition of Simple Access Control Lists
      • Applying Filters to Interfaces
    • 3.2.3 Extension of the Concept
  • 3.3 Mitigation of Bandwidth Allocation Attacks
    • 3.3.1 Limiting the available Bandwidth for each Traffic Class
    • 3.3.2 Configure a Permanent Virtual Connection
  • 3.4 Static Switch Configuration
• 4 Conclusions
• References
• About this document ...