WOOT '14 - Through the Looking-Glass, and What Eve Found There

Through the Looking-Glass, and What Eve Found There

Luca Bruno, Mariano Graziano, Davide Balzarotti, Aurélien Francillon, EURECOM

Looking-glasses are web applications commonly deployed by Autonomous Systems to offer restricted web access to their routing infrastructure, in order to ease remote debugging of connectivity issues. In our study, we looked at existing deployments and open-source code to assess the security of this critical software. As a result, we found several flaws and misconfigurations that can be exploited to escalate from a …

access applications autonomous connectivity debugging eve glass glasses infrastructure offer order restricted routing study systems web web applications