Aggregated path authentication for efficient BGP security

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2005, Pages 128-138

  Zhao, Meiyuan ^a,c   Smith, Sean W ^a   Nicol, David M ^b  

^a Dartmouth Department of Computer Science_Dartmouth College   (United States)

^b University of Illinois at Urbana Champaign   (United States)

^c INTEL CORPORATION   (United States)

Author keywords

Authentication; BGP; Performance; Routing; Security

Indexed keywords

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; NETWORK PROTOCOLS; PERFORMANCE; PROBLEM SOLVING; PUBLIC KEY CRYPTOGRAPHY; REAL TIME SYSTEMS; ROUTERS; SECURITY OF DATA;

AGGREGATE SIGNATURES; BORDER GATEWAY PROTOCOL (BGP); PATH AUTHENTICATION; ROUTING;

GATEWAYS (COMPUTER NETWORKS);

EID: 33745774761     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1102120.1102139     Document Type: Conference Paper

References (46)

1. William Aiello, John Ioannidis, and Patrick McDaniel. Origin Authentication in Interdomain Routing. In Proceedings of the 10th ACM Conference on Computer and Communications Security, pages 165-178. ACM Press, October 2003.
2. Paulo S. L. M. Barreto, Ben Lynn, and Michael Scott. Efficient Implementation of Pairing-Based Cryptosytems. Journal of Cryptology, 17(4):321-334, September 2004.
3. Paulo S.L.M. Berreto. A note on efficient computation of cube roots in characteristic 3. Cryptology ePrint Archive, Report 2004/305. http://eprint.iacr.org/2004/305, 2004.
4. Dan Boneh, Craig Gentry, Ben Lynn, and Hovav Shacham. A Survey of Two Signature Aggregation Techniques. RSA CryptoBytes, 6(2):1-10, 2003.
5. Dan Boneh, Craig Gentry, Ben Lynn, and Hovav Shacham. Aggregate and Verifiably Encrypted Signatures from Bilinear Maps. In Proceedings of Eurocrypt 2003, number 2656 in LNCS, pages 416-432. Springer-Verlag, 2003.
6. Dan Boneh, Ben Lynn, and Hovav Shacham. Short Signatures from the Weil Pairing. In Proceedings of Asiacrypt 2001, number 2248 in LNCS, pages 514-532. Springer-Verlag, 2001.
7. Dan Boneh, Ben Lynn, and Hovav Shacham. Short Signature from the Weil Pairing. Journal of Cryptology, 17(4):297-319, 2004.
8. CIDR BGP Reports from AS1221 (Telstra), May 2005. http://www.cidr-report.org/as1221/.
9. p - x + d. In Advances in Cryptology - Asiacrypt 2003, number 2894 in LNCS, pages 111-123. Springer-Verlag, 2003.
10. Michalis Faloutsos, Petrof Faloutsos, and Christos Faloutsos. On Power-Law Relationships of the Internet Topology. In Proceedings of ACM SIGCOMM'99, pages 251-262. ACM Press, 1999.
11. G. Frey and H. Ruck. A remark considering m-divisibility in the divisor class group of curves. Mathematics of Computation, 62:865-874, 1994.
12. S. Galbraith, K. Harrison, and D. Soldera. Implementing the Tate pairing. In Algorithm Number Theory Symposium - ANTS V, volume 2369 of LNCS, pages 324-337. Springer-Verlag, 2002.
13. Lixin Gao. On Inferring Autonomous System Relationships in the Internet. IEEE/ACM Transactions on Networking (TON), 9(6):733-745, December 2001.
14. Goeffrey Goodell, William Aiello, Timothy Griffin, John Ioannidis, Patrick McDaniel, and Aviel Rubin. Working around BGP: An Incremental Approach to Improving Security and Accuracy in Interdomain Routing. In The 10th Annual Network and Distributed System Security Symposium, San Diego, California, February 2003.
15. Michael Goodrich. Efficient and Secure Network Routing Algorithms. provisional patent filing, http://www.cs.jhu.edu/~goodrich/cgc/pubs/rout-ing.pdf, January 2001.
16. P. Grabher and D. Page. Hardware Acceleration of the Tate Pairing in Characteristic Three. In Workshop on Cryptographic Hardware and Embedded Systems 2005 (CHES 2005), Edinburgh, Scotland, August 2005.
17. R. Granger, D. Page, and M. Stam. On Small Characteristic Algebraic Tori in Pairing-Based Cryptography. Cryptology ePrint Archive, Report 2004/132. http://eprint.iacr.org/2004/132, 2004.
18. Timothy G. Griffin and Gordon Wilfong. An Analysis of BGP Convergence Properties. In Proceedings of SIGCOMM 1999, pages 277-288, August 1999.
19. Vipul Gupta, Matthew Millard, Stephen Fung, Yu Zhu, Nils Gura, Hans Eberle, and Sheueling Chang Shantz. Sizzle: A Standards-based end-to-end Security Architecture for the Embedded Internet. In Third IEEE International Conference on Pervasive Computing and Communications, March 2005.
20. R. Housley, W. Polk, W. Ford, and D. Solo. Internet X.509 Public Key Infrastructure Certificate and CRL Profile. RFC3280, http://www.ietf.org/rfc3280.txt, April 2002.
21. Russ Housley. S-BGP memory issues are the obstacle for real-world deployment. Personal communication, April 2005.
22. Yih-Chun Hu, Adrian Perrig, and Marvin Sirbu. SPY: Secure Path Vector Routing for Securing BGP. In Proceedings of SIGCOMM 2004, pages 179-192. ACM Press, August 2004.
23. Stephen Kent, Charles Lynn, Joanne Mikkelson, and Karen Seo. Secure Border Gateway Protocol (S-BGP) - Real World Performance and Deployment Issues. In The 7th Annual Network and Distributed System Security Symposium (NDSS'00), San Diego, California, February 2000.
24. Stephen Kent, Charles Lynn, and Karen Seo. Secure Border Gateway Protocol. IEEE Journal of Selected Areas in Communications, 18(4):582-592, April 2000.
25. Steve Kent. Securing the Border Gateway Protocol: A Status Update. In Seventh IFIP TC-6 TC-11 Conference on Communications and Multimedia Security, October 2003.
26. T. Kerins, W. P. Marnane, E. M. Popovici, and P.S.L.M. Barreto. Efficient hardware for the Tate pairing calculation in characteristic three. In Workshop on Cryptographic Hardware and Embedded Systems 2005 (CHES 2005), Edinburgh, Scotland, August 2005.
27. Craig Labovitz, Abha Ahuja, Abhijit Bose, and Farnam Jahanian. Delayed Internet Routing Convergence. In Proceedings of SIGCOMM 2000, pages 175-187, August 2000.
28. Anna Lysyanskaya, Silvio Micali, Leonid Reyzin, and Hovav Shacham. Sequential Aggregate Signatures from Trapdoor Permutations. In Eurocrypt 2004, volume 3027 of LNCS, pages 74-90. Springer-Verlag, 2004.
29. Zhuoqing Morley Mao, Ramesh Govindan, George Varghese, and Randy H. Katz. Route Flap Damping Exacerbates Internet Routing Convergence. In Proceedings of SIGCOMM 2002, August 2002.
30. R. Merkle. Protocols for Public Key Cryptosystems. In Proc 1980 Symposium on Security and Privacy, IEEE Computer Society, pages 122-133, April 1980.
31. Victor S. Miller. The Weil Pairing, and Its Efficient Calculation. Journal of Cryptology, 17(4):235-261, September 2004.
32. Multiprecision Integer and Rational Arithmetic C/C++ Library (MIRACL).
33. Multi-threaded Routing Toolkit. http://www.mrtd.net.
34. S. Murphy. BGP Security Vulnerabilities Analysis. Internet-Draft http://www.ietf.org/internet-drafts/draft-murphy-bgp-vuln-01.txt, October 2004.
35. David M. Nicol, Sean W. Smith, and Meiyuan Zhao. Evaluation of Efficient Security for BGP Route Announcements using Parallel Simulation. Simulation Practice and Theory Journal, special issue on Modeling and Simulation of Distributed Systems and Networks, 12(3-4):187-216, July 2004.
36. Andy T. Ogielski and James H. Cowie. SSFNet: Scalable Simulation Framework - Network Models. http://www.ssfnet.org.
37. Brian Premore. An Analysis of Convergence Properties of the Border Gateway Protocol Using Discrete Event Simulation. PhD thesis, Dartmouth College, June 2003.
38. Y. Rekhter and T. Li. A Border Gateway Protocol 4 (BGP-4). RFC1771, http://www.ietf.org/rfc1771.txt, March 1995.
39. The Route Views Project. http://www.antc.uoregon.edu/route-views/.
40. M. Scott and Paulo S.L.M. Barreto. Compressed Pairings. In Advances in Cryptology - CRYPTO'2004, number 3152 in LNCS, pages 140-156. Springer-Verlag, 2004. Updated version: Cryptology ePrint Archive, Report 2004/032. http://eprint.iacr.org/2004/032.
41. B. Smith and J.J. Garcia-Luna-Aceves. Efficient Security Mechanisms for the Border Gateway Routing Protocol. Computer Communications (Elsevier), 21(3):203-210, 1998.
42. Lakshminarayanan Subramanian, Volker Roth, Ion Stoica, Scott Shenker, and Randy H. Katz. Listen and Whisper: Security Mechanisms for BGP. In Proceedings of First Symposium on Networked Systems Design and Implementation (NSDl 2004), March 2004.
43. Tao Wan, Evangelos Kranakis, and P.C. van Oorschot. Pretty Secure BGP (psBGP). In The 12th Annual Network and Distributed System Security Symposium (NDSS'05), San Diego, California, February 2005.
44. Russ White. Securing BGP Through Secure Origin BGP. The Internet Protocol Journal, 6(3): 15-22, September 2003.
45. ANSI X9.63. The Elliptic Curve Digital Signature Algorithm (ECDSA). American Bankers Association, 1999.
46. Meiyuan Zhao, Sean W. Smith, and David M. Nicol. Evaluating the Performance Impact of PKI on BGP Security. In 4th Annual PKI R&D Workshop, April 2005.