多层次域间路由安全监测系统的设计与实现  

Design and Implementation of a Multi-Level Inter-Domain Routing Security Monitoring System

作　　者：马俊[1] 蔡开裕[1] 曹华阳[1] 刘欣[1] 

机构地区：[1]国防科学技术大学计算机学院,湖南长沙410073

出　　处：《计算机工程与科学》2010年第2期60-62,138,共4页Computer Engineering & Science

基　　金：国家863计划资助项目(2006AA01Z213);国家自然科学基金资助项目(60873214)

摘　　要：基于边界网关协议(BGP)的域间路由系统已经成为Internet的核心路由设施,但由于BGP本身缺乏安全机制,很容易受到各种人为配置错误或者恶意攻击的影响。我们开发的域间路由监测系统可以从4个层次实现对域间路由的安全监测,分别是Internet、国家网络、特定ISP和特定路由。本文详细介绍了多层次域间路由安全监测系统的组成结构、软件结构、设计思想、实现技术和测试结果。As we all know, the inter-domain routing systems, based on BGP （Boarder Gateway Protocol, BGP）, has become the core routing facilities of the Internet. However, due to their lack of the BGP security mechanism, BGP is vulnerable to all kinds of human configuration errors or malicious attacks. We develop a multi-level inter-domain routing security monitoring system, and it can achieve four levels of domain routing, including the Internet, national network, a particular ISP and a specific route. This paper describes the system＇s composition structure, software structure, design, implementation technology and the achieved results.

关 键 词：BGP 域间路由 多层次 安全监测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]