RouteChain: Towards Blockchain-based secure and efficient BGP routing
RouteChain: Towards Blockchain-based secure and efficient BGP routing
复制标题
RouteChain：迈向基于区块链的安全高效的BGP路由
DOI：
10.1016/j.comnet.2022.109362
复制
发表时间：
2022
影响因子：
5.6
通讯作者：
Mohaisen, David
中科院分区：
文献类型：
--
作者：
Saad, Muhammad;Anwar, Afsah;Ahmad, Ashar;Alasmary, Hisham;Yuksel, Murat;Mohaisen, David
互联网上的路由是基于弱信任模型在自治系统（AS）之间定义的，其中假设AS是诚实的。虽然这种信任模型加强了AS之间的连接性，但它也导致了可以被利用来劫持路由路径的攻击面。一种这样的攻击被称为BGP前缀劫持，其中恶意AS广播属于目标AS的IP前缀，从而劫持其流量。在本文中，我们提出了RouteChain：一个基于区块链的安全BGP路由系统，可以对抗BGP劫持并保持互联网路由路径的一致性。为此，我们利用区块链的来源保证和防篡改特性来增强AS之间的信任。我们根据AS的地理（网络）接近度对它们进行分组，并构建了一个双层次区块链模型，该模型可以在它们在互联网上传播之前检测虚假前缀。我们使用三种不同的共识协议来评估RouteChain，并通过绘制2008年Youtube劫持事件的案例研究来展示其有效性。实验结果表明，RouteChain能够有效地检测虚假前缀通告，防止BGP攻击.
Routing on the Internet is defined among autonomous systems (ASes) based on a weak trust model where it is assumed that ASes are honest. While this trust model strengthens the connectivity among ASes, it also results in an attack surface that can be exploited to hijack the routing paths. One such attack is known as the BGP prefix hijacking, in which a malicious AS broadcasts IP prefixes that belong to a target AS, thereby hijacking its traffic. In this paper, we proposeRouteChain: a blockchain-based secure BGP routing system that counters BGP hijacking and maintains a consistent view of the Internet routing paths. Towards that, we leverage provenance assurance and tamper-proof properties of blockchains to augment trust among ASes. We group ASes based on their geographical (network) proximity and construct a bi-hierarchical blockchain model that detects false prefixes prior to their spread over the Internet. We evaluateRouteChainusing three different consensus protocols and show its effectiveness by drawing a case study with the Youtube hijacking of 2008. Our results show thatRouteChaincan efficiently detect false prefix announcements and prevent BGP attacks over the Internet.