基于协作的互联网前缀劫持检测方案研究  

Research on a Prefix Hijacks Detection Scheme for the Internet Based on Cooperation

作　　者：刘欣[1] 朱培栋[1] 彭宇行[1] 赵秋[1] 

机构地区：[1]国防科技大学计算机学院,湖南长沙410073

出　　处：《计算机工程与科学》2009年第8期10-12,20,共4页Computer Engineering & Science

基　　金：国家自然科学基金资助项目(60673169);国家863计划资助项目(2006AA01Z213);国防科技大学博士研究生创新资助项目(B070603)

摘　　要：自治系统的网络管理员要想及时地发现前缀劫持非常困难。本文分析了现有方案的不足,讨论了前缀劫持问题困难的根源。考虑到互联网的自治特性,本文提出了一个基于协作的前缀劫持检测方案。该方案支持多个自治系统协作地监测BGP路由,这不仅可分摊系统的监测开销、防止泄露私有的BGP路由信息,而且还可极大地扩展单个自治系统的可监测范围,能有效地帮助网络管理员检测关于自身前缀的劫持事件。It is very difficult for autonomous system （AS） operators to detect prefix hijacks in time. The deficiency of traditional schemes is analyzed, and the reason for the difficulty in solving the prefix hijacks problem is discussed. With the consideration of the autonomy characteristics of the Internet, a detection scheme based on cooperation is proposed, which supports multiple as to cooperatively monitor the BGP routes. The scheme can not only apportion the system＇s monitoring cost and avoid private BGP information leakage, but also enlarge a single AS＇s monitoring scope. The scheme can effectively help network operators detect hijacking incidents on their prefixes.

关 键 词：边界网关协议 前缀劫持 自治系统 宣告方验证 协作监测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]