Abstract
Bi-directional shared tree is an efficient routing scheme for interactive multicast applications with multiple sources. Given the open-group IP multicast service model, it is important to perform sender access control so as to prevent group members from receiving irrelevant data, and also protect the multicast tree from various Denial-of-Service (DoS) attacks. Compared with source specific trees and uni-directional shared trees where information sources can be authorized or authenticated at the single root or Rendezvous Point (RP), in bi-directional trees this problem becomes challengeable since hosts can send data to the shared tree from any network point. In this paper we propose a scalable sender access policy mechanism for bi-directional shared trees so that irrelevant data is policed and discarded once it hits any on-tree router. We consider the scenario of both intra-domain and inter-domain routing in the deployment of the policy, so that the mechanism can adapt to situations in which large-scale multicast applications or many concurrent multicast sessions are involved, potentially across administrative domains.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
K. C. Almeroth, “The Evolution of Multicast: From the MBone to Inter-domain Multicast to Internet2 Deployment”, IEEE Network special issue on Multicasting, Jan., 2000.
T. Ballardie, P. Francis, J. Crowcroft, “Core Based Trees (CBT): An Architecture for Scalable Multicast routing”, Proc. SIGCOMM’93, pp. 85–95.
A. Ballardie, “Scalable Multicast Key Distribution”, RFC 1949, May 1996.
A. Ballardie, J. Crowcroft, “Multicast-Specific Security Threats and Counter-measures”, Proc. NDSS’95, pp. 2–16.
S. Bhattacharyya et al, “An Overview of Source-Specific Multicast (SSM) Deployment”, Internet Draft, draft-ietf-ssm-overview-*.txt, May 2001, work in progress.
B. Cain, “Source Access Control for Bidirectional trees”, 43rd IETF meeting, December, 1998.
B. Cain et al, “Internet Group Management Protocol, Version 3”, Internet draft, draft-ietfidmr-igmp-v3-*.txt, Feb. 1999, work in progress.
S. Deering et al, “The PIM Architecture for Wide-Area Multicast Routing”, IEEE/ACM Transactions on Networking, Vol. 4, No. 2, Apr. 1996, pp. 153–162.
S. Deering, “Multicast Routing in Internetworks and Extended LANs”, Proc. ACM SIGCOMM, 1988, pp. 55–64.
C. Diot et al, “Deployment Issues for the IP Multicast Service and Architecture”, IEEE Network, Jan./Feb. 2000, pp 78–88.
W. Fenner, “Internet Group management Protocol, version 2”, RFC 2236, Nov. 1997.
B. Fenner et al, “Multicast Source Notification of Interest Protocol (MSNIP)”, Internet Draft, draft-ietf-idmr-msnip-*.txt, Feb. 2001.
M. Handley et al, “Bi-directional Protocol Independent Multicast (BIDIR-PIM)”, Internet Draft, draft-ietf-pim-bidir-*.txt, Nov. 2000, work in progress.
H. W. Holbrook, D. R. Cheriton, “IP Multicast Channels: EXPRESS Support for Largescale Single-source Applications”, Proc. ACM SIGCOMM’99.
H. W. Holbrook, B. Cain, “Source-Specific Multicast for IP”, Internet Draft, draftholbrook-ssm-arch-*.txt, Mar. 2001, work in progress.
S. Kummar et al, “The MASC/BGMP Architecture for Inter-domain Multicast Routing”, Proc. ACM SIGCOMM’99.
B. N. Levine et al, “Consideration of Receiver Interest for IP Multicast Delivery”, Proc. IEEE INFOCOM 2000, vol. 2, pp. 470–479.
M. Oliveira et al, “Router Level Filtering for Receiver Interest Delivery”, Proc. NGC’ 2000.
R. Perlman et al, “Simple Multicast: A Design for Simple, Low-overhead Multicast” Internet Draft, draft-perlman-simple-mulitcast-*.txt, Oct. 1999, work in progress.
C. Rigney et al, “Remote Authentication Dial In User Service (RADIUS)”, RFC 2138, Apr. 1997.
C. Shields et al, “KHIP-A Scalable Protocol for Secure Multicast Routing”, Proc. ACM SIGCOMM’99.
B.M. Waxman, “Routing of multipoint connections”, IEEE JSAC 6(9) 1988, pp. 1617–1622.
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2001 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Wang, N., Pavlou, G. (2001). Scalable IP Multicast Sender Access Control for Bi-directional Trees. In: Crowcroft, J., Hofmann, M. (eds) Networked Group Communication. NGC 2001. Lecture Notes in Computer Science, vol 2233. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-45546-9_11
Download citation
DOI: https://doi.org/10.1007/3-540-45546-9_11
Published:
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-42824-4
Online ISBN: 978-3-540-45546-2
eBook Packages: Springer Book Archive