域间路由系统的安全威胁及其对策  

Threats and Countermeasures to Inter-Domain Routing System Security

作　　者：刘迎国[1] 念其锋[1] 朱培栋[1] 

机构地区：[1]国防科技大学计算机学院网络工程系,湖南长沙410073

出　　处：《微机发展》2005年第11期7-10,共4页Microcomputer Development

基　　金：国家自然科学基金资助项目(90204005);国家"八六三"计划资助项目(2003AA121510)

摘　　要：BGP是用于在自治系统之间转发路由信息的协议,它是Internet路由系统中一个非常重要的组成部分。虽然它已被证明是一种非常稳定和有效的协议,但是随着Internet的快速发展与商业化,BGP的一个主要的局限性是它不能处理安全问题,因此经常遭到恶意攻击和人为错误的影响。加之BGP协议自身的脆弱性,使得域间路由系统正面临着非常严峻的安全问题。文中详述了域间路由系统所面临的安全威胁,全面地探讨了协议增强和安全防范机制,并对现有安全方案进行了分析。The border gateway protocol （BGP）, which is used to distribute muting information among autonomous systems （ASes）, is a critical component of the Intemet＇s muting infrastructure. Although it has been proven that BGP works efficiently and steadily, with rapidly devdopment and commercialization of Intemet, a central limitation of BGP is its failure to address security. So it often suffers malicious attacks and effects of misconfiguration. With vulnerability of BGP own, Inter-domain routing is confronted with severe security problem. This paper describes the threats associated with BGP, and explores comprehensive protocol enhancement and protection mechanism of security. In addition, analyses the proposed security countermeasures.

关 键 词：域间路由 安全 策略 协议增强 监测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]