BGP Extension to Support Inter-Domain Distributed Packets Filtering
DOI:
Author:
Affiliation:

Clc Number:

Fund Project:

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    To be trustworthy is an important characteristic of the next generation Internet.The routing system of the present Internet forwards packets only according to the destination IP address.Forged packets with spoofed source IP address will also be forwarded to the destination,which impairs the security of receiver and conceals the real identity of the sender.The trustworthy Internet requires the routing system not only forward packets correctly, but also validate the packets from the real sender.Inter-domain distributed packet filtering is an effective method to filter out spoofed packets.This paper proposes to extend BGP with route selection notice to provide filtering criteria. With the support,border routers can validate incoming packets and filter the spoofed packets form false autonomous systems.Simulation result indicates BGP route selection notice does not impair the routing function of BGP,and both proper design acceptable bandwidth cost and fast convergence may be achieved simultaneously.

    Reference
    Related
    Cited by
Get Citation

王立军,吴建平,徐恪.支持域间分布式分组过滤的BGP扩展.软件学报,2007,18(12):3048-3059

Copy
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:July 15,2006
  • Revised:October 10,2006
  • Adopted:
  • Online:
  • Published:
You are the firstVisitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-4
Address:4# South Fourth Street, Zhong Guan Cun, Beijing 100190,Postal Code:100190
Phone:010-62562563 Fax:010-62562533 Email:jos@iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063