APVAS+: A Practical Extension of BGPsec with Low Memory Requirement
APVAS+: A Practical Extension of BGPsec with Low Memory Requirement
复制标题
DOI：
10.1109/icc42927.2021.9500278
复制
发表时间：
2021-06
期刊：
影响因子：
--
通讯作者：
Tatsuya Takemura;Naoto Yanai;Naoki Umeda;Masayuki Okada;Shingo Okamura;Jason Paul Cruz
中科院分区：
文献类型：
--
作者：
Tatsuya Takemura;Naoto Yanai;Naoki Umeda;Masayuki Okada;Shingo Okamura;Jason Paul Cruz
BGPSEC是一种利用数字签名来确保互联网路由信息的有效性的协议。但是，这是不切实际的，因为它使用数字签名需要超出当前路由器的内存能力的重要内存。近年来，已经提出了基于汇总签名方案的BGPSEC最新扩展，该方案将单个签名汇总到单个短签名中，但近年来提出了它的记忆要求仍然不切实际。在本文中，我们提出了APVA+，该协议可减少与最新协议相比的路由器的内存消耗。 APVA+的内存需求几乎在现实路由器的内存容量之内。虽然最新的BGPSEC协议只能汇总在单个线性网络拓扑上生成的签名，但APVAS+可以使用新型的聚合签名方案在任何网络拓扑上生成的汇总签名。我们还通过扩展了称为Bird的路由器软件来显示APVA+的原型实现。使用此原型，我们对完整的路线信息进行了实验，即约800,000条路线。我们认为可以优化APVAS+以进一步减少其内存需求，我们有希望的结果表明，在保证路由信息的有效性时，运行APVAS+的路由器的内存消耗低于运行其他协议的路由器的内存消耗。
BGPsec is a protocol that utilizes digital signatures to guarantee the validity of routing information on the Internet. However, it is impractical because its use of digital signatures requires significant memory that is beyond the memory capacity of current routers. The latest extension of BGPsec based on an aggregate signature scheme, which aggregates individual signatures into a single short signature, has been proposed in the recent years, but its memory requirement is still impractical. In this paper, we present APVAS+, a protocol that reduces the memory consumption of routers compared to state-of-the-art protocols. The memory requirement of APVAS+ is almost within the memory capacity of real-world routers. While the latest BGPsec protocol can only aggregate signatures generated on a single linear network topology, APVAS+ can aggregate signatures generated on any network topology by using a novel aggregate signature scheme. We also show a prototype implementation of APVAS+ by extending a router software called BIRD. Using this prototype, we conducted experiments on a full route information, i.e., about 800,000 routes. We consider that APVAS+ can be optimized to further reduce its memory requirement, and our promising results show that the memory consumption of routers running APVAS+ is lower than that of routers running other protocols by more than half when guaranteeing the validity of routing information.