Security for multipath TCP: a constructive approach. (16th November 2011)

• Record Type: Journal Article
• Authors: Díez, Javier; Bagnulo, Marcelo; Valera, Francisco; Vidal, Iván
• Is Part Of: International journal of internet protocol technology. Volume 6:Number 3(2011)
• Page Start: 146
• Page End: 155
• Publication Date: 2011-11-16
• Subjects: multipath TCP -- MPTCP -- security -- hash chains; File Transfer Protocol (Computer network protocol) -- Periodicals; Multicasting (Computer networks) -- Periodicals; 004.678
• Languages: English
• ISSNs: 1743-8209

Abstract

Multipath TCP (MPTCP) is a new protocol being developed in the IETF's MPTCP working group in order to provide higher communication availability and to improve the throughput between two multi-addressed endpoints by using multiple paths. Due to the multipath nature and specifically its path management, some new security threats arise apart from those that are already present in standard single-path TCP. These new attacks include flooding and hijacking attacks performed by an off-path attacker. In this paper, we explore different solutions in order to cover the identified security flaws. The main proposal is based on hash chains, which significantly reduces the initial set of threats resulting in a residual group of vulnerabilities, which are also identified.