Integration of security in network routing protocols

ABSTRACT

There are two sources of threats to secure operation of routing protocols in networks. The first source of threats is subverted routers that legitimately participate in a routing protocol. The second source of threats is intruders which may illegally attempt to interfere in routing protocols by masquerading as routers. In this paper, we first analyse the security requirements of network routing protocols and then discuss the necessary measures which can be adopted to make the operation of these protocols secure.

REFERENCES

• 1: D. W. Davies , W. L. Price, Security for computer networks: an introduction to data security in teleprocessing and electronic funds transfer, John Wiley & Sons, Inc., New York, NY, 1984
• 2: Roger M. Needham , Michael D. Schroeder, Using encryption for authentication in large networks of computers, Communications of the ACM, v.21 n.12, p.993-999, Dec. 1978 [doi>10.1145/359657.359659]
• 3: Victor L. Voydock , Stephen T. Kent, Security Mechanisms in High-Level Network Protocols, ACM Computing Surveys (CSUR), v.15 n.2, p.135-171, June 1983 [doi>10.1145/356909.356913]
• 4: M. Satyanarayanan, Integrating security in a large distributed system, ACM Transactions on Computer Systems (TOCS), v.7 n.3, p.247-280, Aug. 1989 [doi>10.1145/65000.65002]
• 5: ISO, "OSI Routeing Framework," ISO/TR 9575, 1989.
• 6: L. R. Ford and D. R. Fulkerson. <i>Flows in Networks</i>, Princeton University Press, 1962.
• 7: I. J. McQuillan, "Adaptive routing algorithms for distributed computer networks," BBN Report 2831, May 1984.
• 8: C. Hedrick, "Routing Information Protocol," RFC 1058, SRI Network Information Center, June 1988.
• 9: C. L. Hedrick, "An Introduction to IGRP," Technical Report, The State University of New Jersey, Center for Computers and Information Services, October 1989.
• 10: E. W. Dijkstra, "A Note on Two Problems in Connection with Graphs," <i>Numerische Mathematik</i>, pp. 269--271, 1959.
• 11: I. J. McQuillan, I. Richer, and E. Rosen, "New adaptive routing algorithms for the ARPANET," <i>IEEE Trans Communications</i>, pp. 1802--1811. 1980.
• 12: J. Moy, "The OSPF Specification," RFC 1131, SRI Network Information Center, October 1989.
• 13: Digital Equipment Corporation, "Intermediate System to Intermediate System Intra-Domain Routeing Exchange Protocol." Technical Report, October 1989.
• 14: Gregory G. Finn. "Reducing the Vulnerability of Dynamic Computer Networks," ISI Research Report. University of Southern California, June 1988.
• 15: Ronald L. Rivest, "MD5 Message-Digest Algorithm," RFC 1321, SRI Network Information center, April 1992.
• 16: R. L. Rivest , A. Shamir , L. Adleman, A method for obtaining digital signatures and public-key cryptosystems, Communications of the ACM, v.21 n.2, p.120-126, Feb. 1978 [doi>10.1145/359340.359342]
• 17: National Bureau of Standards, "Data Encryption Standard," FIPS publication 46-1, January 1988.
• 18: Radia Perlman, "Network Layer Protocol with Byzantine Robustness," Ph.D Thesis, MIT, 1988.
• 19: Andrew D. Birrell, Secure communication using remote procedure calls, ACM Transactions on Computer Systems (TOCS), v.3 n.1, p.1-14, Feb. 1985 [doi>10.1145/214451.214452]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

General Terms:
Algorithms, Management, Performance, Security, Standardization