Having your cake and eating it too: routing security with privacy protections

  • Authors:
  • Alexander J. T. Gurney;Andreas Haeberlen;Wenchao Zhou;Micah Sherr;Boon Thau Loo

  • Affiliations:
  • University of Pennsylvania;University of Pennsylvania;University of Pennsylvania;Georgetown University;University of Pennsylvania

  • Venue:
  • Proceedings of the 10th ACM Workshop on Hot Topics in Networks
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

Internet Service Providers typically do not reveal details of their interdomain routing policies due to security concerns, or for commercial or legal reasons. As a result, it is difficult to hold ISPs accountable for their contractual agreements. Existing solutions can check basic properties, e.g., whether route announcements correspond to valid routes, but they do not verify how these routes were chosen. In essence, today's Internet forces us to choose between per-AS privacy and verifiability. In this paper, we argue that making this difficult tradeoff is unnecessary. We propose private and verifiable routing (PVR), a technique that enables ISPs to check whether their neighbors are fulfilling their contractual promises to them, and to obtain evidence of any violations, without disclosing information that the routing protocol does not already reveal. As initial evidence that PVR is feasible, we sketch a PVR system that can verify some simple BGP policies. We conclude by highlighting several research challenges as future work.