Security Implications and Mitigation Strategies in MPLS Networks
Abstract: Multiprotocol Label Switching (MPLS) is a high-performance telecommunications technology that directs data from one network node to another based on short path labels rather than long network addresses. Its efficiency and scalability have made it a popular choice for large-scale and enterprise networks. However, as MPLS networks grow and evolve, they encounter various security challenges. This paper explores the security implications associated with MPLS networks, including risks such as label spoofing, traffic interception, and denial of service attacks. Additionally, it evaluates advanced mitigation strategies to address these vulnerabilities, leveraging mathematical models and security protocols to enhance MPLS network resilience. By integrating theoretical analysis with practical solutions, this paper aims to provide a comprehensive understanding of MPLS security and propose effective methods for safeguarding network infrastructure.
- Internet traffic engineering using multi-protocol label switching (mpls). Computer Networks, 40(1):111–129, 2002.
- Qos and service interworking using constraint route label distribution protocol (cr-ldp). IEEE Communications Magazine, 39(5):134–139, 2001.
- Grenville Armitage. Mpls: the magic behind the myths [multiprotocol label switching]. IEEE Communications Magazine, 38(1):124–131, 2000.
- Lou Berger. Rfc3473: Generalized multi-protocol label switching (gmpls) signaling resource reservation protocol-traffic engineering (rsvp-te) extensions, 2003.
- Self-similar traffic and network dynamics. Proceedings of the IEEE, 90(5):800–819, 2002.
- Security analysis of the mpls label distribution protocol. In Critical Infrastructure Protection IV: Fourth Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection, ICCIP 2010, Washington, DC, USA, March 15-17, 2010, Revised Selected Papers 4, pages 127–139. Springer, 2010.
- Analysis of the effects of distributed denial-of-service attacks on mpls networks. international Journal of critical infrastructure protection, 6(2):87–95, 2013.
- Edward Humphreys. Implementing the ISO/IEC 27001: 2013 ISMS Standard. Artech house, 2016.
- K Venkatesh Israr-Ul-Maqbool. Mpls security: Acute protection of mpls networks from outside attacks.”. 2015.
- Aggregate message authentication codes. In Cryptographers’ Track at the RSA Conference, pages 155–169. Springer, 2008.
- Suleyman Kondakci. Analysis of information security reliability: A tutorial. Reliability Engineering & System Safety, 133:275–299, 2015.
- Ashish Rao Janardhan Rao. Traffic management between two locations across multiprotocol label switching backbone cloud with enhanced network security. California State University, Long Beach, 2015.
- An integrated protocol for detection and avoidance of denial of service attacks on mpls. Science and Engineering (IJCSE), 2(4):91–102, 2013.
- Mitigating spoofing attacks in mpls-vpns using label-hopping. In Proceedings of the Eleventh International Conference on Networks (ICN 2012), pages 241–245.
- Performance evaluation of an internet protocol security (ipsec) based multiprotocol label switching (mpls) virtual private network. Journal of Computer and Communications, 8(9):100–108, 2020.
- A queueing analysis for the denial of service (dos) attacks in computer networks. Computer Networks, 51(12):3564–3573, 2007.
- Edge router multicasting with mpls traffic engineering. In Proceedings 10th IEEE International Conference on Networks (ICON 2002). Towards Network Superiority (Cat. No. 02EX588), pages 43–48. IEEE, 2002.
- Analyzing traffic crash severity with combination of information entropy and bayesian network. IEEE Access, 7:63288–63302, 2019.
- Rsvp: A new resource reservation protocol. IEEE network, 7(5):8–18, 1993.
Paper Prompts
Sign up for free to create and run prompts on this paper using GPT-5.
Top Community Prompts
Collections
Sign up for free to add this paper to one or more collections.