下一代互联网域间路由安全:威胁与对策  

Next Generation Internet’s Inter-Domain Routing Security:Threats and Countermeasures

作　　者：米强[1] 杜秀春[2] 蔡开裕[2] 刘欣[2] 

机构地区：[1]国家计算机网络与信息安全管理中心,北京100029 [2]国防科技大学计算机学院,湖南长沙410073

出　　处：《计算机工程与科学》2006年第5期5-7,共3页Computer Engineering & Science

基　　金：国家自然科学基金资助项目(90204005);国家863计划资助项目(2003AA12510;2005AA121570)

摘　　要：基于BGP的域间路由系统是下一代互联网的关键基础设施。本文系统地分析了下一代互联网域间路由系统的脆弱性,建立了下一代互联网域间路由的攻击模型对各种攻击目标和攻击方式进行描述,并从多个层次对BGP-4和BGP4+的安全能力进行分析与比较。此外,我们给出了路由攻击检测系统方案,该方法可有效实现域间路由系统的安全控制。The BGP-based inter-domain routing system is the infrastructure of NGI （Next Generation Interact）. There ore serious security threats in the BGP routing system.This paper first analyzes the vulnerability of the inter-domain routing system of NGI, presents an attack model towards inter-domain routing which describes certain attack goals and various attack modes, and compares between BGP-4 and BGP4＋ on security capabilities in view of the protocol hierarchy. We propose a detection scheme for routing attacks, which can effectively achieve the inter-domain routing security of NGL.

关 键 词：域间路由 下一代互联网 安全 攻击检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]