Reputation Mechanism for Inter-domain Routing Security Management

Abstract

Inter-domain routing system is the critical infrastructure of Internet. Make sure that autonomous system (AS) announces and prefers authentic routing information is very important to the security of inter-domain routing system. Due to BGP's opaqueness and AS's autonomy, it is difficult for AS to identify whether an incoming BGP route is valid. We design a reputation mechanism based on Bayesian probability theory to evaluate the trustworthiness of AS. The mechanism takes in the statistical results on routing trustworthiness published by AS, employs posterior probability analysis, and finally calculates a reputation score for a particular AS. Our proposal makes existing route monitoring and analysis tool more effective. Combining with routing decision, reputation mechanism can restrain the propagation of bogus routing information and improve the overall security situation of inter-domain routing system. Our mechanism makes no changes to BGP protocol and supports incremental deployment.