Secure Border Gateway Protocol (S-BGP)

被引：289

作者：

Kent, S ^{[1
]}

Lynn, C ^{[1
]}

Seo, K ^{[1
]}

机构：

[1] BBN Technol, Cambridge, MA 02138 USA

来源：

IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS | 2000年 / 18卷 / 04期

关键词：

denial of service; digital signatures; public-key cryptography; routing; security;

D O I：

10.1109/49.839934

中图分类号：

TM [电工技术]; TN [电子技术、通信技术];

学科分类号：

0808 ; 0809 ;

摘要：

The Border Gateway Protocol (BGP), which is used to distribute routing information between autonomous systems (ASes), is a critical component of the Internet's routing infrastructure. It is highly vulnerable to a variety of malicious attacks, due to the lack of a secure means of verifying the authenticity and legitimacy of BGP control traffic. This paper describes a secure, scalable, deployable architecture (S-BGP) for an authorization and authentication system that addresses most of the security problems associated with BGP. The paper discusses the vulnerabilities and security requirements associated with BGP, describes the S-BGP countermeasures, and explains how they address these vulnerabilities and requirements. In addition, this paper provides a comparison of this architecture to other approaches that have been proposed, analyzes the performance implications of the proposed countermeasures, and addresses operational issues.

引用

页码：582 / 592

页数：11