多路径域间路由决策检测协议

J4 ›› 2013, Vol. 48 ›› Issue (7): 39-45.

多路径域间路由决策检测协议

邱修峰1,2,刘建伟1,伍前红1,刘建华1

1.北京航空航天大学电子信息工程学院, 北京 100191;
2.赣南师范学院数学与计算机系, 江西赣州 341000

收稿日期:2013-06-17 发布日期:2013-12-03
作者简介:邱修峰(1973- ),男,讲师,博士研究生,研究方向网络安全. Email:qxf20491001@126.com
基金资助:
国家重点基础研究发展规划项目(2012CB315905);国家自然科学基金资助项目(61272501);北京市自然科学基金资助项目(4132056)

Multipath interdomain routing decision verification protocol

QIU Xiu-feng1,2, LIU Jian-wei1, WU Qian-hong1, LIU Jian-hua1

1. School of Electronics and Information Engineering, Beihang University, Beijing 100191, China;
2. Department of Mathematics and Computer, Gannan Normal College, Ganzhou 341000, Jiangxi, China

Received:2013-06-17 Published:2013-12-03

摘要/Abstract

摘要：

由于不同域之间的利益和安全策略存在复杂的竞争与冲突,域间路由安全问题一直具有挑战性。当前相关研究主要集中于路由源可信性与路径信息可信性等方向,但对域间路由策略实施可信性则较少关注。设计了一种多路径域间路由决策检测协议,可验证一个自治域是否遵守从N条目的地相同的候选路径中选择合适的M条路径发送往下游自治域的路由选择决策承诺。分析表明协议正确有效,同时可以抵抗伪造、篡改和重放等攻击,且具有增量部署和尊重参与者隐私的特性。

关键词: 多路径;域间路由选择决策;承诺;验证

Abstract:

Because of complicated security policy collisions and twisted interest conflicts between different network domains, interdomain routing security has been one challenge of secure routing. At present most of related researches focus on the authentication of routing source and true path, but seldom address another point of whether the routing decision process matches expected policy. A multipath interdomain routing decision verification protocol was designed, which can check whether an AS keeps its promise about choosing appropriate M from N paths that have the same destination and are received from upstream ASs, and sending to a downstream AS. According to the analysis, the protocol is valid and respects the privacy of participants, as well as can resist attacks such as forgery, tampering and replay etc. and deploy on internet incrementally.

Key words: multipath; inter-domain routing decision; promise; verification

中图分类号:

TP309

邱修峰1,2,刘建伟1,伍前红1,刘建华1. 多路径域间路由决策检测协议[J]. J4, 2013, 48(7): 39-45.

QIU Xiu-feng1,2, LIU Jian-wei1, WU Qian-hong1, LIU Jian-hua1. Multipath interdomain routing decision verification protocol[J]. J4, 2013, 48(7): 39-45.

参考文献

多维度评价

Viewed

Full text

Abstract

Cited

Shared

Discussed