Sign What You Really Care about – Secure BGP AS Paths Efficiently

Abstract : The inter-domain routing protocol, Border Gateway Protocol (BGP), plays a critical role in the reliability of the Internet routing system, but forged routes generated by malicious attacks or mis-configurations may devastate the system. The security problem of BGP has attracted considerable attention, and although several solutions have been proposed, none of them have been widely deployed due to weaknesses such as high computational cost or potential security compromise. This paper proposes Fast Secure BGP (FS-BGP), an efficient mechanism for securing AS paths and preventing prefix hijacking by signing critical AS path segments. We prove that FS-BGP can achieve a similar level of security as S-BGP, but with much higher efficiency. Our experiments use BGP UPDATE data collected from real backbone routers. Compared with S-BGP, FS-BGP only requires a very small cache, and can reduce the cost of signing and verification by orders of magnitude. Indeed, the signing and verification can be accomplished as fast as the most bursty BGP UPDATE arrivals, which implies that FS-BGP will hardly delay the propagation of routing information.
Type de document :
Communication dans un congrès
Robert Bestak; Lukas Kencl; Li Erran Li; Joerg Widmer; Hao Yin. 11th International Networking Conference (NETWORKING), May 2012, Prague, Czech Republic. Springer, Lecture Notes in Computer Science, LNCS-7289 (Part I), pp.259-273, 2012, NETWORKING 2012. 〈10.1007/978-3-642-30045-5_20〉
Liste complète des métadonnées

Littérature citée [18 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01531135
Contributeur : Hal Ifip <>
Soumis le : jeudi 1 juin 2017 - 11:35:08
Dernière modification le : jeudi 1 juin 2017 - 15:00:58
Document(s) archivé(s) le : mercredi 6 septembre 2017 - 18:37:46

Fichier

978-3-642-30045-5_20_Chapter.p...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Yang Xiang, Zhiliang Wang, Jianping Wu, Xingang Shi, Xia Yin. Sign What You Really Care about – Secure BGP AS Paths Efficiently. Robert Bestak; Lukas Kencl; Li Erran Li; Joerg Widmer; Hao Yin. 11th International Networking Conference (NETWORKING), May 2012, Prague, Czech Republic. Springer, Lecture Notes in Computer Science, LNCS-7289 (Part I), pp.259-273, 2012, NETWORKING 2012. 〈10.1007/978-3-642-30045-5_20〉. 〈hal-01531135〉

Partager

Métriques

Consultations de la notice

93

Téléchargements de fichiers

31