Reputation-Based Collaborative Management Method for Inter-Domain Routing Security

In complex products, maintaining subsystem consistency throughout the design process is often a time-consuming process of document exchange among cooperating functions. This paper describes a conflict management approach that lead to the computer-aided management of the product specification conflicts that happen due to the integration of subsystems. In order to define a framework, a systematic interface representation which proposes building generic interface schemes for subsystem connectivity representation is described. Based on this methodology, a functional architecture of the proposed conflict management method, along with generic exception taxonomy of conflicts is developed. The applicability of the proposed concepts is discussed through illustrative examples. The proposed methodology is intended to allow automatic detection and handling of interface connectivity errors throughout collaborative design processes.

Download Full-text

Multipath Inter-Domain Routing Decision Verification Protocol

Applied Mechanics and Materials ◽

10.4028/www.scientific.net/amm.713-715.2269 ◽

2015 ◽

Vol 713-715 ◽

pp. 2269-2275

Author(s):

Xiu Feng Qiu ◽

Jian Wei Liu ◽

Qian Hong Wu ◽

Qi Zhong

Keyword(s):

Decision Process ◽

Security Policy ◽

Secure Routing ◽

Routing Security ◽

True Path ◽

Interest Conflicts ◽

Inter Domain Routing

Because of complicated security policy collisions and twisted interest conflicts in network domains, inter-domain routing security has been a challenge of secure routing. At present most of related researches focus on the authentication of routing source and true path, but seldom addresses another point of whether the routing decision process matches expected policy. In this paper, a multipath inter-domain routing decision verification protocol was designed, which can verify whether an autonomous domain (AD) keeps its promise about choosing appropriate M from N paths that have the same destination and are received from upstream ADs, and sending to a downstream AD. According to the analysis, the protocol is valid and can protect privacy of participants, as well as can resist attacks such as forgery, modification and replay etc. and deploy on internet incrementally.

Download Full-text

ROUSSEAU: A Monitoring System for Inter-domain Routing Security

6th Annual Communication Networks and Services Research Conference (cnsr 2008) ◽

10.1109/cnsr.2008.65 ◽

2008 ◽

Cited By ~ 1

Author(s):

Wenping Deng ◽

Peidong Zhu ◽

Xicheng Lu

Keyword(s):

Monitoring System ◽

Routing Security ◽

Inter Domain Routing

Download Full-text

Achieving inter-domain routing security based on distributed translator trust model

Computer Science and Information Systems ◽

10.2298/csis140910057k ◽

2015 ◽

Vol 12 (4) ◽

pp. 1327-1344

Author(s):

Lingjing Kong ◽

Hong Shen

Keyword(s):

Trust Model ◽

Ring Structure ◽

Border Gateway Protocol ◽

Experimental Results ◽

Convergence Time ◽

Single Node ◽

Routing Security ◽

Restoration Mechanism ◽

Information Translation ◽

Inter Domain Routing

To resolve the difficulties in deployment of the classic security solution S-BGP (Secure Border Gateway Protocol), the Translator Trust Model (TTM) for a new solution SE-BGP (Security Enhanced BGP) was proposed to transform the centralized deployment mode of S-BGP to distributed mode. However, the trust (attestations of routing information) translation of TTM only depends on a single hub node and this results in severe threats for the inter-domain routing system. To overcome the deficiencies of TTM, in this paper we improve TTM to Distributed TTM (DTTM) by expanding the single hub node to a set of selected multiple hub nodes; in our DTTM, the task of attestations is distributed over multiple hub nodes instead of on a single hub node. In order to make the hub nodes respond to the case of single node failures, we design a restoration mechanism to recover the network based on the neighbour-ring structure. Besides, we develop Cooperative Secure BGP (CSBGP) to realize DTTM in BGP. In comparison with SE-BGP, our experimental results show that CS-BGP achieves an improved scalability, reduced convergence time and enhanced security.

Download Full-text