An OSPF router could be attacked from ANYWHERE in the internet if the router’s IP address is known. Extremely easy to mount DDoS attacks for outsider attackers. Extremely difficult to trace back the attacker Attacker’s Location Physical access to the link Attacker “On the Path” Access to the link’s password Access to a router Telnet or SSH Session OSPF Router OSPF Router OSPF Router OSPF Router OSPF Router OSPF Router OSPF Domain OSPF Domain ATTACKER ATTACKER ATTACKER INTERNET INTERNET |