@InProceedings{ TMA2022,
	author = "Alfred Arouna and Steinar Bjørnstad and Stein Jørgen Ryan and Thomas Dreibholz and Sobia Rind and Ahmed Mustafa Elmokashfi",
	title = "{Network Path Integrity Verification using Deterministic Delay Measurements}",
	booktitle = "{Proceedings of the 6th IEEE/IFIP Network Traffic Measurement and Analysis Conference~(TMA)}",
	numpages = "8",
	day = "29",
	month = jun,
	year = "2022",
	address = "Enschede, Overijssel/Netherlands",
	language = "english",
	isbn = "978-3-903176-47-8",
	keywords = "Network, Deterministic RTT, Alien Switch",
	abstract = "{If an attacker succeeds in planting a device in a network, detecting the alien device can be extremely difficult. With the intuition that every device on the data path contributes to the end-to-end delay, we propose a simple and deterministic measurement-based approach for detecting the insertion of a layer-2 switch on the data path of a network operator. For this purpose, we use commodity hardware and the standard ping tool for collecting ICMP RTTs. To minimise inaccuracies in the measurements, we increase timing determinism on both ICMP source and target by using a real-time kernel on both, a dedicated source (a Linux server) and target (an RPI4 with custom image). Additionally, we manipulate real-time attributes for prioritising the ping process. By using this approach on different loaded networks: lab, campus network, research and education network and an ISP, we are able to reliably detect that a switch was added at the end of the path or within it. Our method yields an excellent performance on networks with considerable cross traffic as well as lightly loaded networks.}",
	url = "https://web-backend.simula.no/sites/default/files/publications/files/tma_camera_ready_network_path_integrity_verification_using_deterministic_delay_measurements.pdf",
	url.size = "457440",
	url.md5 = "2e26d7e6bb08e8d8fd9fe6da67b960c1",
	url.mime = "application/pdf",
	url.pagesize = "612 x 792 pts (letter)",
	url.checked = "2024-06-30 12:15:46 CEST",
	note = "{ISBN} 978-3-903176-47-8"
}