期刊名称：International Journal of Engineering and Computer Science
印刷版ISSN：2319-7242
出版年度：2013
卷号：2
期号：8
页码：2565-2568
出版社：IJECS
摘要：The Internet routing system plays an essential role of gluing together tens of thousands of individual networks to create a global datadelivery substrate. Over the years many efforts have been devoted to securing the routing system, the weak trust model in BorderGateway Protocol (BGP) introduces severe vulnerabilities for Internet routing including active malicious attacks and unintendedmisconfigurations. Although various secure BGP solutions have been proposed, the complexity of security enforcement and dataplaneattacks still remain open problems. We propose TBGP, a trusted BGP scheme aiming to achieve high authenticity of Internetrouting with a simple and lightweight attestation mechanism. TBGP introduces a set of route update and withdrawal rules that, ifcorrectly enforced by each router, can guarantee the authenticity and integrity of route information that is announced to other routersin the Internet. To verify this enforcement, an attestation service running on each router provides interfaces for a neighbouring routerto challenge the integrity of its routing stack, enforced rules, and the attestation service itself. If this attestation succeeds, theneighbouring router updates its routing table or announces the route to its neighbours, following the same rules. Thus, a router on arouting path only needs to verify one neighbour’s routing status to ensure that the route information is valid. Through this, TBGPbuilds a transitive trust relationship among all routers on a routing path. We implement a prototype of TBGP to investigate i tspracticality.
关键词：Internet Routing; Border Gate way Protocol; Security Attacks
