Internet Registry Mechanism for Preventing Prefix Hijacks
DOI:
Author:
Affiliation:

Clc Number:

Fund Project:

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    Based on the registering idea of IRR (internet routing registry), the concept of Prefix Policy is proposed,and a new Internet registry mechanism, E-IRR, is presented. E-IRR offers an efficient and defensive method toprevent hijacked routes. In E-IRR, every participant declares its prefix policies, and makes use of the others’registered prefix policies to validate BGP routes. Measures are designed to guarantee the validity of prefix policies,and evaluate its capabilities of security and performance. The major benefits of the method are the balance itreaches between the capability of preventing prefix hijacks and the security mechanism’s requirements of practicaldeployment, the facts that the method lends itself to stepwise deployment and needs not any BGP extension for security. These properties, not shared by alternative approaches, make it an attractive and viable solution to theprefix hijacking problem.

    Reference
    Related
    Cited by
Get Citation

刘欣,朱培栋,彭宇行.防范前缀劫持的互联网注册机制.软件学报,2009,20(3):620-629

Copy
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:April 06,2007
  • Revised:October 26,2007
  • Adopted:
  • Online:
  • Published:
You are the firstVisitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-4
Address:4# South Fourth Street, Zhong Guan Cun, Beijing 100190,Postal Code:100190
Phone:010-62562563 Fax:010-62562533 Email:jos@iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063