Integrating security in inter-domain routing protocols

ABSTRACT

Network routing protocols work in a vulnerable environment. Unless protected by appropriate security measures, their operation can be easily subverted by intruders capable of modifying, deleting or adding false information in routing updates. This paper first analyses threats to the secure operation of inter-domain routing protocols, and then proposes various counter measures to make these protocols secure against external threats.

REFERENCES

• 1: J. H. Saltzer , D. P. Reed , D. D. Clark, End-to-end arguments in system design, ACM Transactions on Computer Systems (TOCS), v.2 n.4, p.277-288, Nov. 1984 [doi>10.1145/357401.357402]
• 2: [2] Gregory G. Finn "Reducing the Vulnerability of Dynamic computer Networks," ISI Research Report, University of Southern California, June 1988.
• 3: [3] ISO, "Intermediate System to Intermediate System Inter-Domain Routeing Information exchange protocol," DIS 10747, July 1992.
• 4: [4] ISO, "Protocol for Providing the Connectionless-mode Network service," ISO 8473, 1988.
• 5: [5] Jon Postel, "Internet Protocol," RFC 791, SRI Network Information Center, September 1981.
• 6: K. Lougheed , Y. Rekhter, Border Gateway Protocol 3 (BGP-3), RFC Editor, 1991
• 7: R. Rivest, The MD5 Message-Digest Algorithm, RFC Editor, 1992
• 8: R. L. Rivest , A. Shamir , L. Adleman, A method for obtaining digital signatures and public-key cryptosystems, Communications of the ACM, v.21 n.2, p.120-126, Feb. 1978 [doi>10.1145/359340.359342]
• 9: [9] D.E. Denning, Cryptography and Data Security, Addison-Wesley Publishing Company, London, 1984.
• 10: Dorothy E. Denning, Digital signatures with RSA and other public-key cryptosystems, Communications of the ACM, v.27 n.4, p.388-392, April 1984 [doi>10.1145/358027.358052]
• 11: [11] Radia Perlman, "Network Layer Protocol with Byzantine Robustness," Ph.D Thesis, MIT, 1988.
• 12: S. T. Kent , J. Linn, Privacy enhancement for Internet electronic mail: Part II - certificate-based key management, RFC Editor, 1989
• 13: [13] Estrin and Gene Tsudik, "Secure Control of Transit Internetwork Traffic," Computer Networks and ISDN Systems, vol. 22, no. 5, pp. 363-381, October 1991.
• 14: [14] Bella Bollabas, Random Graphs, p. 447, Academic Press, London, 1985.
• 15: [15] Barry M. Leiner, Robert Cole, Jon Postel, and David Mills, "The DARPA Internet Protocol Suite, "IEEE Communications Magazine, vol. 28, no. 3, pp. 29-34, March 1985.
• 16: [16] Davies and W.L. Price, Security for Computer Netoworks, John Wiley & Sons Ltd., Chichester, 1984.
• 17: Andrew D. Birrell, Secure communication using remote procedure calls, ACM Transactions on Computer Systems (TOCS), v.3 n.1, p.1-14, Feb. 1985 [doi>10.1145/214451.214452]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

  F. Theory of Computation
  F.2 ANALYSIS OF ALGORITHMS AND PROBLEM COMPLEXITY
      F.2.2 Nonnumerical Algorithms and Problems
          Subjects: Routing and layout

General Terms:
Design, Measurement, Performance, Security, Standardization, Theory, Verification