Route leak identification: A step toward making inter-domain routing more reliable
Route leak identification: A step toward making inter-domain routing more reliable
复制标题
路由泄漏识别：使域间路由更加可靠的一步
DOI：
10.1109/drcn.2014.6816139
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
X. Masip
中科院分区：
文献类型：
--
作者：
M. S. Siddiqui;D. Montero;M. Yannuzzi;R. Serral;X. Masip
路由泄漏是域间路由的异常之一，它有能力产生大规模的Internet服务中断。路由泄漏是由于自治系统之间违反路由策略而引起的。不幸的是，没有太多的研究，正式和彻底地分析路由泄漏问题。几乎没有传统的解决方案可以用作第一道防线，例如路由过滤器。然而，这些缓解措施在可伸缩性方面变得不可行，主要是由于维护过滤器更新的管理开销和成本。因此，互联网的很大一部分对路由泄漏攻击毫无防御能力。在本文中，我们定义，描述和检查不同类型的路由泄漏威胁的安全性和可靠性的路由系统。我们的主要贡献可以概括如下。我们开发了一个相当基本的理论框架，它在现实的假设下，使域自主确定是否收到一个特定的路由广告对应于路由泄漏。我们的理由可能发生的路由泄漏在不同的情况下，制定要求，其识别的目的，因此，预防，以提高路由的可靠性。
Route leaks are one of the anomalies of inter-domain routing that have the capacity to produce large Internet service disruptions. Route leaks are caused because of violation of routing policies among Autonomous Systems. Unfortunately, there are not many studies that formally and thoroughly analyze the route leak problem. There exist few conventional solutions that can be used as a first line of defense, such as route filters. However, these palliatives become unfeasible in terms of scalability, mainly due to the administrative overhead and cost of maintaining the filters updated. As a result, a significant part of the Internet is defenseless against route leak attacks. In this paper, we define, describe, and examine the different types of route leaks that threaten the security and reliability of the routing system. Our main contributions can be summarized as follows. We develop a rather basic theoretical framework, which, under realistic assumptions, enables a domain to autonomously determine if a particular route advertisement received corresponds to a route leak. We reason the possible occurrence of route leaks in different scenarios, with the aim of formulating requirements for their identification, and hence thereof prevention to improve routing reliability.