Evaluation of efficient security for BGP route announcements using parallel simulation

Simulation Modelling Practice and Theory

Volumn 12, Issue 3-4 SPEC. ISS., 2004, Pages 187-216

  Nicol, David M ^a   Smith, Sean W ^b   Zhao, Meiyuan ^b  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b DARTMOUTH COLLEGE   (United States)

Author keywords

Inter domain routing; Parallel simulation for routing; S BGP

Indexed keywords

COMPUTATIONAL METHODS; COMPUTER SIMULATION; CONVERGENCE OF NUMERICAL METHODS; INTERNET; NETWORK PROTOCOLS; OPTIMIZATION; PUBLIC KEY CRYPTOGRAPHY; ROUTERS;

BORDER GATEWAY PROTOCOL (BGP); CRYPTOGRAPHIC OPTIMIZATIONS; INTER DOMAIN ROUTING; PARALLEL SIMULATION FOR ROUTING;

GATEWAYS (COMPUTER NETWORKS);

EID: 3042699520     PISSN: 1569190X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.simpat.2003.10.003     Document Type: Article

References (36)

1. OpenSSL: The Open Source toolkit for SSL/TLS. Available from 〈http://www.openssl.org〉.
2. Ripe: Réseaux IP Européns. Available from 〈http://www.ripe.net〉.
3. SSFNet: Scalable Simulation Framework - Network Models. http://www.ssfnet.org. See http://www.ssfnet.org/publications.html for links to related publications.
4. Doraswamy N., Harkins D. IPsec: The New Security Standard for the Internet, Intranets, and Virtual Private Networks. 1999;Prentice Hall.
5. R. Govindan, A. Reddy, An Analysis of internet inter-domain topology and route stability, in: Proceedings of INFOCOM 1997, April 1997, pp. 850-857.
6. T.G. Griffin, B.J. Premore, An experimental analysis of BGP convergence time, in: Proceedings of ICNP 2001, November 2001, pp. 53-61.
7. T.G. Griffin, F. Bruce Shepherd, G. Wilfong, Policy disputes in path-vector protocols, in: Proceedings of ICNP 1999, October 1999, pp. 21-30.
8. T.G. Griffin, G. Wilfong, An analysis of BGP convergence properties, in: Proceedings of SIGCOMM 1999, August 1999, pp. 277-288.
9. Hauser R.C., Przygienda T., Tsudik G. Lowering security overhead in link state routing. Computer Networks. 31(8):1999;885-894.
10. A. Heffernan, RFC 2385: Protecting of BGP Sessions via the TCP MD5 signature option, 1998.
11. Y. Hu, A. Perrig, D. Johnson, Efficient security mechanisms for routing protocols, in: Proceedings of Network and Distributed System Security Symposium, San Diego, California, February 2003.
12. K. Ishiguro, G. Zebra. 〈http://www.zebra.org〉.
13. Kent S., Lynn C., Seo K. Secure Border Gateway Protocol. IEEE Journal of Selected Areas in Communications. 18(4):2000.
14. C. Labovitz, A. Ahuja, A. Bose, F. Jahanian, Delayed Internet routing convergence, in: Proceedings of SIGCOMM 2000, August 2000, pp. 175-187.
15. C. Labovitz, A. Ahuja, F. Jahanian, Experimental study of internet stability and wide-area backbone failures, in: Proceedings of the International Symposium on Fault-Tolerant Computing, June 1999.
16. C. Labovitz, A. Ahuja, R. Wattenhofer, S. Venkatachary, The impact of internet policy and topology on delayed routing convergence, in: Proceedings of INFOCOM 2001, April 2001, pp. 537-546.
17. Z. Morley Mao, R. Govindan, G. Varghese, R.H. Katz, Route flap damping exacerbates internet routing convergence, in: Proceedings of SIGCOMM 2002, August 2002.
18. R. Merkle, Protocols for public key cryptosystems, in: Proceedings of 1980 Symposium on Security and Privacy, IEEE Computer Society, April 1980, pp. 122-133.
19. J. Joyce Mulligan, Detection and Recovery from the Oblivious Engineer Attack, Master's thesis, Massachusetts Institute of Technology, September 2002.
20. S. Murphy, BGP Security Protections, Internet-Draft, draft-murphy-bgp- protect-00.txt, NAI Labs, February 2002.
21. S. Murphy, BGP Security Vulnerabilities Analysis, Internet-Draft, draft-murphy-bgp-vuln-00.txt, NAI Labs, February 2002.
22. D. Pei, X. Zhao, L. Wang, D. Massey, A. Mankin, S. Felix Wu, L. Zhang, Improving BGP convergence through consistency assertions, in: Proceedings of INFOCOM 2002, June 2002.
23. B. Premore, An Analysis of Convergence Properties of the Border Gateway Protocol Using Discrete Event Simulation, PhD thesis, Dartmouth College, June 2003.
24. Merkle R. A certified digital signature. Brassard G. Advances in Cryptology - CRYPTO'89. Lecture Notes in Computer Science. vol. 435:1990;218-238 Springer-Verlag.
25. G. Riley, BGP++. 〈http://www.ece.gatech.edu/research/labs/MANIACS/ BGP++/〉.
26. A. Shaikh, A. Varma, L. Kalampoukas, R. Dube, Routing stability in congested networks: experimentation and analysis, in: Proceedings of SIGCOMM 2000, August 2000, pp. 163-167.
27. Smith B., Garcia-Luna-Aceves J.J. Efficient security mechanisms for the Border Gateway Routing Protocol. Computer Communications. 21(3):1998;203-210.
28. B. Smith, S. Murthy, J.J. Garcia-Luna-Aceves, Securing distance vector routing protocols, in: Proceedings of Internet Society Symposium on Network and Distributed System Security, San Diego, California, February 1997.
29. S. Smith, D. Tygar, Security and privacy for partial order time, in: ISCA Seventh International Conference on Parallel and Distributed Computing Systems, October 1994.
30. Smith S., Weingart S.H. Building a high-performance, programmable secure coprocessor. Computer Networks. 31(April):1999;831-860.
31. B.K. Szymanski, Yu Liu, R. Gupta, Parallel network simulation under distributed genesis, in: Proceedings of the Seventeenth Workshop on Parallel and Distributed Simulation, June 2003.
32. H. Tangmunarunkit, R. Govindan, S. Shenker, D. Estrin, The Impact of routing policy on internet paths, in: Proceedings of INFOCOM 2001, April 2001, pp. 736-742.
33. I. van Beijnum, BGP: Building Reliable Networks with the Border Gateway Protocol, O'Reilly, 2002.
34. K. Varadhan, R. Govindan, D. Estrin, Persistent Route Oscillations in Inter-Domain Routing, Technical Report 96-631, USC/Information Sciences Institute, March 1996.
35. K. Zhang, Efficient protocols for signing routing messages, in: Symposium on Network and Distributed Systems Security (NDSS '98), San Diego, California, 1998.
36. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. Felix Wu, L. Zhang, Validation of the MOAS conflicts through assertions, in: Proceedings of the International Conference on Dependable Systems and Networks, June 2002.