A New Approach for Security in MPLS Multicast Networks

摘要

This paper proposes a new approach to provide security for MPLS multicast networks. The proposed work is based on the (k, k) Threshold Sharing Scheme (TSS) where it can protect the confidentiality of IP multicast packets transmitted though the MPLS networks. The receivers for a multicast session can reconstruct, the original traffic from the k trees available. Therefore, the attacker must tap all k trees to be able to reconstruct the original IP multicast packets that are being transmitted, while attacking k - 1 or less of these trees makes it hard or even impossible to reconstruct the original IP multicast packets. Our proposed work can also provide protection against IP spoofing attacks. Moreover, our objective is also to minimize bandwidth overhead.