The state of affairs in BGP security: A survey of attacks and defenses
The state of affairs in BGP security: A survey of attacks and defenses
复制标题
DOI：
10.1016/j.comcom.2018.04.013
复制
发表时间：
2018-06
期刊：
影响因子：
--
通讯作者：
Asya Mitseva;A. Panchenko;T. Engel
中科院分区：
文献类型：
--
作者：
Asya Mitseva;A. Panchenko;T. Engel
边界网关协议（BGP）是事实上的标准域间路由协议。尽管它在互联网上扮演着关键的角色，但它并没有提供任何安全保证。针对这一问题，近几十年来大量的研究提出了各种各样的BGP安全扩展和检测-恢复系统。然而，BGP仍然容易受到许多类型的攻击。在这项工作中，我们对基本的BGP威胁进行了最新的审查，并提出了评估现有BGP安全建议的方法。在此基础上，我们介绍了一个全面的和最新的调查，旨在使BGP安全和方法的检测和减轻路由不稳定性。最后但并非最不重要的是，我们发现研究中的差距，并指出开放的问题和未解决的挑战。
The Border Gateway Protocol (BGP) is the de facto standard interdomain routing protocol. Despite its critical role on the Internet, it does not provide any security guarantees. In response to this, a large amount of research has proposed a wide variety BGP security extensions and detection-recovery systems in recent decades. Nevertheless, BGP remains vulnerable to many types of attack. In this work, we conduct an up-to-date review of fundamental BGP threats and present a methodology for evaluation of existing BGP security proposals. Based on this, we introduce a comprehensive and up-to-date survey of proposals intended to make BGP secure and methods for detection and mitigation of routing instabilities. Last but not least, we identify gaps in research, and pinpoint open issues and unsolved challenges.