Origin authentication in interdomain routing

Computer Networks

Volumn 50, Issue 16, 2006, Pages 2953-2980

  McDaniel, Patrick ^a   Aiello, William ^b   Butler, Kevin ^a   Ioannidis, John ^c  

^a The Pennsylvania State University   (United States)

^b UNIVERSITY OF BRITISH COLUMBIA   (Canada)

^c Och Spine at New York Presbyterian Hospitals   (United States)

Author keywords

Address management; Authentication; BGP; Delegation; Routing; Security

Indexed keywords

COMPUTER CRIME; COMPUTER GRAPHICS; COMPUTER SIMULATION; COST ACCOUNTING; INTERNET; SECURITY OF DATA; SEMANTICS;

ADDRESS MANAGEMENT; AUTHENTICATION; BGP; DELEGATION; ROUTING; SECURITY;

ROUTERS;

EID: 33747891596     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2005.11.007     Document Type: Article

References (62)

1. S. Agarwal, C.-N. Chuah, S. Bhattacharyya, C. Diot. The impact of BGP dynamics on intra-domain traffic, New York, NY, USA, June 2004, ACM SIGMETRICS 2004.
2. W. Aiello, K. Butler, P. McDaniel, Path authentication in interdomain routing, Technical Report NAS-TR-0002-2004, Network and Security Research Center, Department of Computer Science, Pennsylvania State University, University Park PA, USA, October 2004.
3. Aiello W., Chung F., and Lu L. Random evolution of massive graphs. Proceedings of IEEE Symposium on Foundations in Computer Science (2001), IEEE, Las Vegas, NV 510-519
4. W. Aiello, S. Lodha, R. Ostrovsky, Fast digital identity revocation, in: Proceedings of CRYPTO 98, Santa Barbara, CA, August 1998, pp. 137-152.
5. ARIN, American Registry for Internet Numbers, March 2005. Available from: .
6. Barabási A., and Albert R. Emergence of Scaling in Random Networks. Science 286 (1999) 509-512
7. S. Bellovin, R. Bush, T. Griffin, J. Rexford, Slowing routing table growth by filtering based on address allocation policies, June 2001. Available from: .
8. K. Butler, T. Farley, P. McDaniel, J. Rexford, A survey of BGP security issues and solutions, Technical Report TD-5UGJ33, AT&T Labs-Research, Florham Park, NJ, February 2004 (revised June 2004).
9. S. Cheung, An efficient message authentication scheme for link state routing, in: 13th Annual Computer Security Applications Conference, San Diego, CA, December 1997, pp. 90-98.
10. B. Weis (Ed.), Secure origin BGP (soBGP) certificates, Internet Research Task Force, June 2003 (draft-weis-sobgp-certificates-00.txt).
11. R. White (Ed.), Deployment considerations for secure origin BGP (soBGP), Internet Research Task Force, October 2002 (draft-white-sobgp-bgp-extensions-00.txt).
12. M. Faloutsos, P. Faloutsos, C. Faloutsos. On power-law relationships of the Internet Topology, in: Proceedings of ACM SIGCOMM Conference, ACM, Cambridge, MA, 1999.
13. N. Feamser, H. Balakrishnan, Detecting BGP configuration faults with static analysis, in: Proceedings of the 2nd Symposium on Networked Systems Design and Implementation (NSDI'05), USENIX, Boston, MA, May 2005.
14. V. Fuller, T. Li, J. Yu, K. Varadhan, Classless inter-domain routing (CIDR): an address assignment and aggregation strategy, Internet Engineering Task Force, RFC 1519, September 1993.
15. G. Goodell, W. Aiello, T. Griffin, J. Ioannidis, P. McDaniel, A. Rubin, Working around BGP: an incremental approach to improving security and accuracy of interdomain routing, in: Proceedings of Network and Distributed Systems Security 2003, Internet Society, San Diego, CA (Draft), February 2003.
16. B. Green, BGP security update: is the sky falling? NANOG 25, June 2002.
17. T. Griffin, Personal communication, May 2003.
18. R. Housley, W. Ford, W. Polk, D. Solo, Internet X.509 Public Key Infrastructure Certificate and CRL Profile, Internet Engineering Task Force, RFC 1949, January 1999.
19. Y. Hu, A. Perrig, D. Johnson, Efficient security mechanisms for routing protocols, in: Proceedings of Network and Distributed Systems Security 2003, Internet Society, San Diego, CA, February 2003.
20. Y.-C. Hu, A. Perrig, M. Sirbu, SPV: secure path vector routing for securing BGP, in: Proceedings of ACM SIGCOMM'04, Portland, OR, USA, ACM, August 2004.
21. G. Huston, Bgp table data, March 2005. Available from: .
22. IANA, Autonomous System Numbers, March 2005.
23. IANA, Internet Protocol V4 Address Space, March 2005. Available from: .
24. IANA, The Internet Assigned Numbers Authority, March 2005. Available from: .
25. ICANN, The Internet Corporation for Assigned Names and Numbers, May 2003. Available from: .
26. S. Kent, Securing the Border Gateway Protocol: a status update, in: Seventh IFIP TC-6 TC-11 Conference on Communications and Multimedia Security, Torino, Italy, October 2003.
27. S. Kent, R. Atkinson, Security architecture for the Internet Protocol, RFC 2401, November 1998.
28. S. Kent, C. Lynn, J. Mikkelson, K. Seo, Secure Border Gateway Protocol (S-BGP)-real world performance and deployment issues, in: Proceedings of Network and Distributed Systems Security 2000, Internet Society, February 2000.
29. Kent S., Lynn C., and Seo K. Secure Border Gateway Protocol (Secure-BGP). IEEE Journal on Selected Areas in Communications 18 4 (2000) 582-592
30. Kocher P. On certificate revocation and validation. In: Hirschfeld R. (Ed). Financial Cryptography vol. 1465 (1998), Springer, Anguilla, British West Indies 172-177 February
31. C. Kruegel, D. Mutz, W. Robertson, F. Valeur, Topology-based detection of anomalous BGP messages, in: Proceedings of the 6th Symposium on Recent Advances in Intrusion Detection (RAID), September 2003, pp. 17-35.
32. C. Lonvick, RADIUS attributes for soBGP support, Internet Draft, February 2004.
33. R. Mahajan, D. Wetherall, T. Anderson, Understanding BGP misconfiguration, in: Proceedings of ACM SIGCOMM '02, ACM, September 2002.
34. P. McDaniel, S. Jamin, Windowed certificate revocation, in: Proceedings of IEEE INFOCOM 2000, IEEE, Tel Aviv, Israel, March 2000, pp. 1406-1414.
35. X. Meng, Z. Xu, L. Zhang, S. Lu, An analysis of BGP routing table evolution, Technical Report TR030046, Computer Science Department, UCLA, January 2003.
36. R. Merkle, Protocols for public key cryptosystems, in: Proceedings of the 1980 Symposium on Security and Privacy, IEEE, Oakland, CA, April 1980, pp. 122-133.
37. D. Meyer, The RouteViews Project, May 2003. Available from: .
38. S. Micali, Efficient certificate revocation, Technical Report Technical Memo MIT/LCS/TM-542b, Massachusetts Institute of Technology, 1996.
39. S. Misel, Wow, AS7007! Available from: .
40. S. Murphy, BGP security vulnerabilities analysis (Draft), Internet Research Task Force, February 2002 (draft-murphy-bgp-vuln-00.txt).
41. M. Naor, K. Nassim, Certificate revocation and certificate update, in: Proceedings of the 7th USENIX Security Symposium, January 1998, pp. 217-228.
42. H. Narayan, R. Govindan, G. Varghese, The impact of address allocation and routing on the structure and implementation of routing tables, in: Proceedings of ACM SIGCOMM'03, Karlsruhe, Germany, ACM, August 2003.
43. J. Ng, Extensions to BGP to support secure origin BGP (soBGP), Internet Draft, October 2002.
44. D. Nicol, S. Smith, M. Zhao, Efficient security for BGP route announcements, Dartmouth Computer Science Technical Report TR-2003-440, February 2002.
45. Nordström O., and Dovrolis C. Beware of BGP attacks. Computer Communications Review 34 2 (2004) 1-8
46. D. Pei, W. Aiello, A. Gilbert, P. McDaniel, Origin disturbances in BGP, July 2004.
47. D. Pei, D. Massey, L. Zhang, A framework for resilient Internet routing protocols, Technical report, UCLA, November 2003.
48. R. Perlman, Network layer protocols with Byzantine robustness, Technical Report MIT/LCS/TR-429, October 1988.
49. Y. Rekhter, T. Li, A Border Gateway Protocol 4 (BGP 4), Internet Engineering Task Force, March 1995, RFC 1771.
50. J. Rexford, Personal communication, April 2005.
51. J. Rexford, J. Wang, Z. Xiao, Y. Zhang, BGP routing stability of popular destinations, in: ACM SIGCOMM IMW (Internet Measurement Workshop) 2002, 2002.
52. R. Rivest, The MD5 Message Digest Algorithm, Internet Engineering Task Force, RFC 1321, April 1992.
53. K. Seo, C. Lynn, S. Kent, Public-key Infrastructure for the Secure Border Gateway Protocol (S-BGP), in: Proceedings of DARPA Information Survivability Conference and Exposition II, IEEE, June 2001.
54. B. Smith, J. Garcia-Luna-Aceves, Securing the border gateway routing protocol, in: Proceedings of Global Internet '96, November 1996, pp. 103-116.
55. Stewart J. BGP4: Interdomain Routing in the Internet (1998), Addison-Wesley
56. L. Subramanian, S. Agarwal, J. Rexford, R.H. Katz, Characterizing the Internet Hierarchy from multiple vantage points, in: Proceedings of IEEE INFOCOM 2002, IEEE, June 2002.
57. L. Subramanian, V. Roth, I. Stoica, S. Shenker, R. Katz, Listen and whisper: security mechanisms for BGP, in: Proceedings of the First Symposium on Networked Systems Design and Implementation (NSDI'04), San Francisco, CA, USA, March 2004.
58. T. Wan, E. Kranakis, P.C. van Oorschot, Pretty secure BGP (psBGP), in: Proceedings of Network and Distributed Systems Security Symposium 2005 (NDSS'05), San Diego, CA, USA, Internet Society, February 2005.
59. Z. Wenzel, J. Klensin, R. Bush, S. Huter, Guide to administrative procedures for the Internet infrastructure, Internet Engineering Task Force, August 2000, RFC 2901.
60. M. Zhao, S.W. Smith, D.M. Nicol, Evaluating the performance impact of PKI on BGP security, in: Proceedings of the 4th Annual PKI Research Workshop (PKI'05), NIST, Gaithersburg, MD, April 2005.
61. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S.F. Wu, L. Zhang, An analysis of BGP multiple origin AS (MOAS) conflicts, in: ACM SIGCOMM Internet Measurement Workshop 2001, ACM, November 2001.
62. Zipf G.K. Human Behaviour and the Principle of Least Effort (1949), Hafner