摘要
由于不同域之间的利益和安全策略存在复杂的竞争与冲突,域间路由安全问题一直具有挑战性。当前相关研究主要集中于路由源可信性与路径信息可信性等方向,但对域间路由策略实施可信性则较少关注。设计了一种多路径域间路由决策检测协议,可验证一个自治域是否遵守从N条目的地相同的候选路径中选择合适的M条路径发送往下游自治域的路由选择决策承诺。分析表明协议正确有效,同时可以抵抗伪造、篡改和重放等攻击,且具有增量部署和尊重参与者隐私的特性。
Because of complicated security policy collisions and twisted interest conflicts between different network do- mains, interdomain routing security has been one challenge of secure routing. At present most of related researches fo- cus on the authentication of routing source and true path, but seldom address another point of whether the routing deci- sion process matches expected policy. A multipath interdomain routing decision verification protocol was designed, which can check whether an AS keeps its promise about choosing appropriate M from N paths that have the same desti- nation and are received from upstream ASs, and sending to a downstream AS. According to the analysis, the protocol is valid and respects the privacy of participants, as well as can resist attacks such as forgery, tampering and replay etc. and deploy on internet incrementally.
出处
《山东大学学报（理学版）》
CAS
CSCD
北大核心
2013年第7期39-45,共7页
Journal of Shandong University(Natural Science)
基金
国家重点基础研究发展规划项目(2012CB315905)
国家自然科学基金资助项目(61272501)
北京市自然科学基金资助项目(4132056)
关键词
多路径
域间路由选择决策
承诺
验证
multipath
inter-domain routing decision
promise
verification
