se-bgp一种bgp安全机制

《se-bgp一种bgp安全机制》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

1、ISSN1000-9825,CODENRUXUEWE-mail:jos@iscas.ac.cnJournalofSoftware,Vol.19,No.1,January2008,pp.167−176http://www.jos.org.cnDOI:10.3724/SP.J.1001.2008.00167Tel/Fax:+86-10-62562563©2008byJournalofSoftware.Allrightsreserved.∗SE-BGP:一种BGP安全机制+胡湘江,朱培栋,龚正虎(国防科学技术大学计算机学院,湖南长沙410073)SE-BGP:AnApproachforBGPSec

2、urity+HUXiang-Jiang,ZHUPei-Dong,GONGZheng-Hu(SchoolofComputer,NationalUniversityofDefenseTechnology,Changsha410073,China)+Correspondingauthor:Phn:+86-731-4574606,E-mail:csriver@126.com,http://www.nudt.edu.cnHuXJ,ZhuPD,GongZH.SE-BGP:AnapproachforBGPsecurity.JournalofSoftware,2008,19(1):167−176.http:

3、//www.jos.org.cn/1000-9825/19/167.htmAbstract:BGP(bordergatewayprotocol)securityisveryimportanttotheinter-domainroutingsecurity.Manysolutionshavebeenproposed,butnonehasbeendeployeduntilnow.Thispaperanalyzesthemainproblemsoftheseapproaches.ItstudiestheAS(autonomoussystem)topologyoftheInternet,especi

4、allytherich-clubproperty,andgivesthenotionoftheASalliance.ItproposesSE-BGP(securityenhancedBGP)asanewwayforBGPsecurity.Analliance-basedsecurityarchitecture,andanewtrustmodel-TTM(translatortrustmodel)forSE-BGPareconstituted.AnauthenticationschemebasedonTTMisalsodesigned.Furthermore,thewayofhowtoexte

5、ndtheBGPprotocolisconsidered.TheSE-BGPhasstrongabilityofsecurityandgoodscalability,andthenumberoftheusedcertificatesisabout1%ofthetraditionalsolutions.Keywords:BGP(bordergatewayprotocol)security;SE-BGP(securityenhancedBGP);AS(autonomoussystem)alliance;trustmodel;TTM(translatortrustmodel)摘要:BGP(bord

6、ergatewayprotocol)协议的安全是Internet路由系统安全的关键.目前已提出多种BGP安全机制,但都未能得到部署.对BGP安全机制的部署问题进行深入分析,利用AS(autonomoussystem)结构的Rich-Club特性,提出AS联盟的概念,设计了一种BGP安全机制:SE-BGP(securityenhancedBGP).SE-BGP采用基于AS联盟的安全体系结构,使用一种具有分布式认证中心的新的信任模型——TTM(translatortrustmodel).设计了基于TTM模型的认证算法,给出了基于现有BGP协议的扩充实现方法.与已有的安全机制相比,SE-BGP在保

7、证安全能力的同时,所需的证书规模大约为原有机制的1%,具有良好的可扩展性.关键词:BGP(bordergatewayprotocol)安全;SE-BGP(securityenhancedBGP);AS(autonomoussystem)联盟;信任模型;TTM(translatortrustmodel)中图法分类号:TP393文献标识码:A∗SupportedbytheNationalNaturalScienc