Aggressive Testing Of Multicast Routing System Of Next-Generation Internet

With the popularity of Internet, the influence of network technology can be found at every corner of the society, such as working, living, and amusement. Because of the effective network bandwidth utilization, IP multicast has been the favor technology to implement many applications. But the security of multicast has been ignored all along. Because of the one-to-many and many-to-many characteristic of the traditional multicast service model, multicast network is vulnerable for Deny-of-Service attack, this also affects the running of unicast network indirectly.Based on Attack-Tree technique and the deep comprehension of IP multicast routing protocols, comprehensive analyses on the security menaces of multicast protocols were given in the paper, including IPv4 IGMP, PIM-SM/SSM, MSDP and SSM service model and the new embedded RP mechanism of next-generation Internet protocol IPv6. Some relative multicast security countermeasures are studied in this paper.Aggressive testing method is presented in this paper, which can simulate the behavior character of attack actions in the real world. With aggressive testing tools, we can find the security problems of IP multicast network.A multicast aggressive testing framework is given in this paper. The testing objects include various devices, from the edge network devices, hosts to core network devices. Most of the active IPv4 and IPv6 multicast protocols are tested. By coordinated testing, complicated DDoS attacks can be simulated.At last, to solve the discovered security problems, some advices on routing protocols of the next generation Internet and multicast deployment are given. Our work can be used to improve the security of multicast network.