The inter-domain routing system of the Internet is composed of Autonomous Systems (ASes), with their security mechanisms affecting the overall security of the Internet. Route Origin Validation (ROV) is a security technique for curbing malicious attacks against the routing system. The use of ROV by ASes is the basis for studying many aspects of the Internet, such as assessing Internet security and robustness. Previous research for passively measuring the status of ROV operation have been limited to specific types of ASes, such as Vantage Points (VPs) or stub ASes. We propose an ROV identification framework called TriNT that measures the path triplet difference between valid and invalid routing paths. The ROV identification results of the TriNT closely match the implementation of ROV as announced by the AS operators. Compared with previous methods, TriNT has a low network overhead, a short experimental cycle, and recognition of a wide range of ASes.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

TriNT: A Framework for ROV Identification Based on Triplet

  • Yujing Liu,
  • Jiangbin Chen,
  • Shuhui Chen

摘要

The inter-domain routing system of the Internet is composed of Autonomous Systems (ASes), with their security mechanisms affecting the overall security of the Internet. Route Origin Validation (ROV) is a security technique for curbing malicious attacks against the routing system. The use of ROV by ASes is the basis for studying many aspects of the Internet, such as assessing Internet security and robustness. Previous research for passively measuring the status of ROV operation have been limited to specific types of ASes, such as Vantage Points (VPs) or stub ASes. We propose an ROV identification framework called TriNT that measures the path triplet difference between valid and invalid routing paths. The ROV identification results of the TriNT closely match the implementation of ROV as announced by the AS operators. Compared with previous methods, TriNT has a low network overhead, a short experimental cycle, and recognition of a wide range of ASes.