STI: Towards more Secure Inter-Domain Routing

提高域间路由的可靠性可以说是当今互联网安全所面临的最艰巨的挑战之一。域间路由协议提供了在内聚管理控制下的组织（例如，大学、公司、isp）在它们之间交换和传播可达性信息的方法。从本质上讲，这些协议定义了数据通过这些策略穿越Internet到达预定目的地的策略。因此，域间路由协议的中断，无论是良性的还是故意的，都可能导致互联网的大部分无法访问。本提案包括设计、分析和部署一个协议，以更好地分析和验证路由协议，特别关注边界网关协议（BGP），这是互联网中使用的事实上的域间路由协议。这个项目不是试图改变像BGP这样广泛部署的协议，而是试图验证从协议交互产生的消息中观察到的信息。在这个提议中，我们讨论了这样一个验证协议的方式，例如与BGP相邻运行，可以提高互联网的安全性和可靠性，同时允许增量部署。后一个目标很重要，因为假设互联网上的每个边缘路由器都可以（或将）同时采用新协议是不现实的。在这方面，该项目是专门为任何部署服务器以支持协议验证的人提供即时好处而设计的，因此，无论有多少其他站点正在执行协议，都可以激励站点参与。然而，随着采用率的增加，它对整个互联网社区的好处也会增加。

Improving the reliability of inter-domain routing is arguably one of the most daunting challenges faced in securing the Internet today. Inter-domain routing protocols provide the means by which organizations under cohesive administrative control (e.g., universities, companies, ISPs) exchange and propagate reachability information among themselves. In essence, such protocols de.ne policies by which data traverses the Internet to arrive at its intended destination(s). As such, disruptions in inter-domain routing protocols, whether benign or intentional, may result in large segments ofthe Internet becoming inaccessible.This proposal encompasses the design, analysis and deployment of a protocol to better analyze and validate routing protocols, with particular attention to the Border Gateway Protocol (BGP),which is the de facto inter-domain routing protocol used in the Internet. Rather than attempting to change widely deployed protocols like BGP, this project is an attempt to validate the observed information in messages that result from protocol interactions. In this proposal, we discuss ways in which such a validation protocol, running adjacent to BGP for example, can improve the security and reliability of the Internet, while at the same time, allow for incremental deployment. This latter goal is significant, as it is not realistic to assume that every edge router on the Internet can(or will) adopt a new protocol at the same time.In that regard, the project is specifically designed to offer immediate benefit to anyone deploying a server to support protocol validation, so that the incentive is for sites to participate, regardless of how many others are executing the protocol. However, as adoption increases, so will its benefit to the greater Internet community at large.