Sign what you really care about --- secure BGP AS paths efficiently

Authors:
Yang Xiang;Zhiliang Wang;Jianping Wu;Xingang Shi;Xia Yin
Affiliations:
Tsinghua National Laboratory for Information Science and Technology (TNList), China,Network Research Center, Tsinghua University, Beijing, P.R. China;Department of Computer Science & Technology, Tsinghua University, Beijing, China,Network Research Center, Tsinghua University, Beijing, P.R. China;Tsinghua National Laboratory for Information Science and Technology (TNList), China,Department of Computer Science & Technology, Tsinghua University, Beijing, China,Network Research Center, Ts ...;Department of Computer Science & Technology, Tsinghua University, Beijing, China,Network Research Center, Tsinghua University, Beijing, P.R. China;Tsinghua National Laboratory for Information Science and Technology (TNList), China,Network Research Center, Tsinghua University, Beijing, P.R. China
Venue:
IFIP'12 Proceedings of the 11th international IFIP TC 6 conference on Networking - Volume Part I
Year:
2012

Citing 9
Cited 0

Stable internet routing without global coordination

IEEE/ACM Transactions on Networking (TON)
SPV: secure path vector routing for securing BGP

Proceedings of the 2004 conference on Applications, technologies, architectures, and protocols for computer communications
Quantifying path exploration in the internet

Proceedings of the 6th ACM SIGCOMM conference on Internet measurement
Listen and whisper: security mechanisms for BGP

NSDI'04 Proceedings of the 1st conference on Symposium on Networked Systems Design and Implementation - Volume 1
On interdomain routing security and pretty secure BGP (psBGP)

ACM Transactions on Information and System Security (TISSEC)
Pretty Good BGP: Improving BGP by Cautiously Adopting Routes

ICNP '06 Proceedings of the Proceedings of the 2006 IEEE International Conference on Network Protocols
How secure are secure interdomain routing protocols

Proceedings of the ACM SIGCOMM 2010 conference
Inter-AS Inbound Traffic Engineering via ASPP

IEEE Transactions on Network and Service Management
Secure Border Gateway Protocol (S-BGP)

IEEE Journal on Selected Areas in Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

The inter-domain routing protocol, Border Gateway Protocol (BGP), plays a critical role in the reliability of the Internet routing system, but forged routes generated by malicious attacks or mis-configurations may devastate the system. The security problem of BGP has attracted considerable attention, and although several solutions have been proposed, none of them have been widely deployed due to weaknesses such as high computational cost or potential security compromise. This paper proposes Fast Secure BGP (FS-BGP), an efficient mechanism for securing AS paths and preventing prefix hijacking by signing critical AS path segments. We prove that FS-BGP can achieve a similar level of security as S-BGP, but with much higher efficiency. Our experiments use BGP UPDATE data collected from real backbone routers. Compared with S-BGP, FS-BGP only requires a very small cache, and can reduce the cost of signing and verification by orders of magnitude. Indeed, the signing and verification can be accomplished as fast as the most bursty BGP UPDATE arrivals, which implies that FS-BGP will hardly delay the propagation of routing information.