In a report from New Scientist, Max Schuchard a computer science graduate student and his buddies claim theyâ€™ve found a way to launch DDoS attacks on Border Gateway Protocol (BGP) network routers that could crash the Internet.
BGP is an essential Internet protocol. Itâ€™s the routing protocol used to exchange routing information across the Internet. Without it ISPs couldnâ€™t connect to each other and you couldnâ€™t connect Web sites and services outside of your local intranet. Because network connections and routers are constantly changing, BGP routers and switches are constantly working to keep current route maps of the Internet. In short, you donâ€™t want to mess it.
In an Association for Computing Machinery (ACM) paper, Losing control of the Internet: using the data plane to attack the control plane, Schuchard describes the theoretical assault as â€œthe Coordinated Cross Plane Session Termination, or CXPST, attack, a distributed denial of service attack that attacks the control plane of the Internet. CXPST extends previous work that demonstrates a vulnerability in routers that allows an adversary to disconnect a pair of routers using only data plane traffic. By carefully choosing BGP sessions to terminate, CXPST generates a surge of BGP updates that are seen by nearly all core routers on the Internet. This surge of updates surpasses the computational capacity of affected routers, crippling their ability to make routing decisions
I found this randomly and thought it was pretty interesting. Please read the article before saying "this won't work" .