Advertisement

Schengen Routing: A Compliance Analysis

  • Daniel Dönni
  • Guilherme Sperb Machado
  • Christos Tsiaras
  • Burkhard Stiller
Part of the Lecture Notes in Computer Science book series (LNCS, volume 9122)

Abstract

Schengen Routing was proposed as a countermeasure to traffic monitoring activities practiced by intelligence agencies. This work here presents the results of a larger-scale measurement performed to quantify Schengen Routing compliance in today’s Internet. Based on 3388 TCP, UDP, and ICMP traceroute measurements executed from RIPE Atlas probes located in over 1100 different Autonomous Systems (AS) in the Schengen Area, it was found that 34.5% to 39.7% of these routes are Schengen-compliant, while compliance levels vary from 0% to 80% among countries. Finally, an approach was developed that allows end-users to determine whether a specific route to a host is Schengen-compliant or not.

Keywords

Schengen Routing Geo-location Compliance checks 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Augustin, B., Cuvellier, X., Orgogozo, B., Viger, F., Friedman, T., Latapy, M., Magnien, C., Teixeira, R.: Avoiding Traceroute Anomalies with Paris Traceroute. In: 6th ACM SIGCOMM Conference on Internet Measurement (IMC 2006), Rio de Janeiro, Brazil, pp. 153–158 (2006)Google Scholar
  2. 2.
    Blau, J.: NSA Surveillance Sparks Talk of National Internets. IEEE Spectrum 51, 14–16 (2014)CrossRefGoogle Scholar
  3. 3.
    Bourgeau, T.: Monitoring Network Topology Dynamism of Large-scale Traceroute-based Measurements. In: 7th IEEE International Conference on Network and Service Management, Paris, France, pp. 489–493 (October 2011)Google Scholar
  4. 4.
    Computerwoche: Internet-Verband ECO Beklagt Scheindiskussion um “Schengen-Routing”, http://www.computerwoche.de/a/internet-verband-eco-beklagt-scheindiskussion-um-schengen-routing,2556658 (last accessed: Feburary 2015)
  5. 5.
    D. Dönni, G.S. Machado: Traceroute Measurements in Schengen Area, http://www.csg.uzh.ch/publications/data/traceroute-schengen/ (last accessed: Feburary 2015)
  6. 6.
    Dönni, D.: chkroute utility, https://cms.uzh.ch/lenya/csg/authoring/publications/software/chkroute.html (last accessed: March 2015)
  7. 7.
    Banerjee, S., Griffin, T.G., Pias, M.: The Interdomain Connectivity of PlanetLab Nodes. In: Barakat, C., Pratt, I. (eds.) PAM 2004. LNCS, vol. 3015, pp. 73–82. Springer, Heidelberg (2004)CrossRefGoogle Scholar
  8. 8.
    EMANICSLab, http://www.emanicslab.org (last accessed: December 2014)
  9. 9.
    European Commission: The Schengen Area, http://biblio.ucv.ro/bib_web/bib_pdf/EU_books/0056.pdf (last accessed: Feburary 2015)
  10. 10.
    Maxmind: GeoLite Legacy Downloadable Databases, http://dev.maxmind.com/geoip/legacy/geolite (last accessed: December 2014)
  11. 11.
    He, Y., Faloutsos, M., Krishnamurthy, S., Huffaker, B.: On Routing Asymmetry in the Internet. In: Global Telecommunications Conference (GLOBECOM 2005), St. Louis, USA, vol. 2, p. 6 (2005)Google Scholar
  12. 12.
    Hyun, Y., Broido, A., Claffy, K.C.: Traceroute and BGP AS Path Incongruities, Cooperative Association for Internet Data Analysis (CAIDA), Technical Report (March 2003), http://www.caida.org/publications/papers/2003/ASP/asp-incon.pdf (last accessed: February 2015)
  13. 13.
    Landau, S.: Making Sense from Snowden: What’s Significant in the NSA Surveillance Revelations. Journal of Security Privacy 11(4), 54–63 (2013)CrossRefGoogle Scholar
  14. 14.
    OpenWRT, https://openwrt.org (last accessed: January 2015)
  15. 15.
    Planet-Lab, https://www.planet-lab.org (last accessed: December 2014)
  16. 16.
    Pohlmann, N., Sparenberg, M., Siromaschenko, I., Kilden, K.: Secure Communications and Digital Sovereignty in Europe. In: ISSE 2014 Securing Electronic Business Processes, Brussels, Belgium, pp. 155–169 (2014)Google Scholar
  17. 17.
    RIPE NCC: RIPE ATLAS, http://atlas.ripe.net (last accessed: December 2014)
  18. 18.
    Sundaresan, S., Burnett, S., Feamster, N., De Donato, W.: BISmark: A Testbed for Deploying Measurements and Applications in Broadband Access Networks. In: 2014 USENIX Conference, San Diego, USA, pp. 383–394 (August 2014)Google Scholar
  19. 19.
    Zhang, Y., Oliveira, R., Zhang, H., Zhang, L.: Quantifying the Pitfalls of Traceroute in AS Connectivity Inference. In: Krishnamurthy, A., Plattner, B. (eds.) PAM 2010. LNCS, vol. 6032, pp. 91–100. Springer, Heidelberg (2010)CrossRefGoogle Scholar

Copyright information

© IFIP International Federation for Information Processing 2015

Authors and Affiliations

  • Daniel Dönni
    • 1
  • Guilherme Sperb Machado
    • 1
  • Christos Tsiaras
    • 1
  • Burkhard Stiller
    • 1
  1. 1.Department of InformaticsUniversity of ZurichZurichSwitzerland

Personalised recommendations