Enhancing BGP security based on decentralized authentication
The Border Gateway Protocol (BGP) is the established inter-domain routing protocol utilized on the Internet. However, its original design placed greater emphasis on protocol efficiency and robustness rather than addressing security and trust concerns of network participants, consequently leaving the inter-domain routing system susceptible to numerous security risks. This thesis examines the inherent security vulnerabilities in the BGP inter-domain routing protocol, including hijacking, tampering, and leakage resulting from its internal flaws. It also addresses the significant security risks associated with centralized trust verification mechanisms that contribute to management centralization and trust monopolization. Furthermore, it integrates blockchain technology to propose a decentralized trusted BGP security mechanism, which ensures the authenticity and traceability of inter-domain protocol message sources and provides protection against interdomain routing hijacking.
Authors
- Xiaopeng Yang (ORCID: https://orcid.org/0000-0002-7516-5323)
- Lizhe Liu (ORCID: https://orcid.org/0000-0001-5111-0750)
- Chunxu Kuang
- Yangyang Zhao
- Xiaobo Guo (ORCID: https://orcid.org/0000-0002-9981-7402)
- Hao Li (ORCID: https://orcid.org/0009-0004-2149-2937)
Publication Details
- Published
- 2024-11-19
- DOI
- https://doi.org/10.1117/12.3052469
- Primary Topic
- IPv6, Mobility, Handover, Networks, Security
- Type
- article
- Field-Weighted Citation Impact
- 0.00