Towards Blockchain-Based Secure BGP Routing, Challenges and Future Research Directions
Source abstract
Abstract
Border Gateway Protocol (BGP) is a standard inter-domain routing protocol for the Internet that conveys network layer reachability information and establishes routes to different destinations. The BGP protocol exhibits security design defects, such as an unconditional trust mechanism and the default acceptance of BGP route announcements from peers by BGP neighboring nodes, easily triggering prefix hijacking, path forgery, route leakage, and other BGP security threats. Meanwhile, the traditional BGP security mechanism, relying on a public key infrastructure, faces issues like a single point of failure and a single point of trust. The decentralization, anti-tampering, and traceability advantages of blockchain offer new solution ideas for constructing secure and trusted inter-domain routing mechanisms. In this paper, we summarize the characteristics of BGP protocol in detail, sort out the BGP security threats and their causes. Additionally, we analyze the shortcomings of the traditional BGP security mechanism and comprehensively evaluate existing blockchain-based solutions to address the above problems and validate the reliability and effectiveness of blockchain-based BGP security methods in mitigating BGP security threats. Finally, we discuss the challenges posed by BGP security problems and outline prospects for future research.
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Blockchain Technology Applications and Security · Internet Traffic Analysis and Secure E-voting
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (63)
Show source-provided references
1. Y. Rekhter, T. Li, and S. Hares, “A border gateway protocol 4 (BGP-4),” RFC 4271, 2006. Accessed: Dec. 15, 2023. [Online]. Available: https://datatracker.ietf.org/doc/rfc4271/10.17487/rfc4271 ↗
2. A first step towards checking BGP routes in the data plane
3. Secure inter-domain routing based on blockchain: A comprehensive survey10.3390/s22041437 ↗
4. Research on blockchain-based interdomain security solutions
5. A survey of the resource public key infrastructure
6. Research progress of network security architecture and key technologies based on blockchain
7. Secure Internet of Vehicles (IoV) with decentralized consensus blockchain mechanism10.1109/TVT.2023.3268135 ↗
8. EAKE-WC: Efficient and anonymous authenticated key exchange scheme for wearable computing10.1109/TMC.2023.3297854 ↗
9. Network intrusion detection system (NIDS) based on Pseudo-Siamese stacked autoencoders in fog computing10.1109/TSC.2023.3319953 ↗
10. Blockchain-based decentralized storage networks: A survey10.1016/j.jnca.2020.102656 ↗
11. A security framework for distributed ledgers
12. Study on BGP security10.3724/SP.J.1001.2013.04346 ↗
13. Stable internet routing without global coordination10.1109/90.974523 ↗
14. Toward the mutual routing security in wide area networks: A scoping review of current threats and countermeasures10.1016/j.comnet.2023.109778 ↗
15. BGP hijacking classification
16. RIPE NCC, “YouTube Hijacking: A RIPE NCC RIS case study,” 2008. Accessed: Dec. 15, 2023. [Online]. Available: https://www.ripe.net/publications/news/youtube-hijacking-a-ripe-ncc-ris-case-study/
17. Problem definition and classification of BGP route leaks
18. BGPmon Blog, “BGP leak causing Internet outages in Japan and beyond,” 2017. Accessed: Dec. 15, 2023. [Online]. Available: https://www.bgpmon.net/bgp-leak-causing-internet-outages-in-japan-and-beyond/
19. BGP route flap damping
20. Route flap damping exacerbates internet routing convergence
21. Protection of BGP sessions via the TCP MD5 signature option
22. The TCP authentication option
23. Losing control of the Internet: Using the data plane to attack the control plane
24. Low-rate TCP-targeted dos attack disrupts internet routing
25. Research on blockchain-based inter-domain routing authentication technology
26. Secure border gateway protocol (S-BGP)10.1109/49.839934 ↗
27. A survey of the border gateway protocol security
28. Securing BGP through secure origin BGP (soBGP)
29. On interdomain routing security and pretty secure BGP (psBGP)
30. An infrastructure to support secure internet routing
31. A profile for route origin authorizations (ROAs)
32. BGPSEC protocol specification
33. Limiting the power of RPKI authorities
34. BGP with BGPsec: Attacks and countermeasures10.1109/MNET.2018.1800171 ↗
35. On the risk of misbehaving RPKI authorities
36. The resource public key infrastructure (RPKI) to router protocol
37. S. Nakamoto, “Bitcoin: A peer-to-peer electronic cash system,” 2008. Accessed: Dec. 15, 2023. [Online]. Available: https://bitcoin.org/bitcoin.pdf
38. A survey of blockchain consensus algorithms performance evaluation criteria10.1016/j.eswa.2020.113385 ↗
39. I. Gorkey, E. Sennema, C. El Moussaoui, and V. Wijdeveld, “Comparative study of byzantine fault tolerant consensus algorithms on permissioned blockchains,” 2020. (Accessed: December 15, 2023). [Online]. Available: http://resolver.tudelft.nl/uuid:01083a4a-900b-4cf9-9746-cb9258c11d9e
40. The byzantine generals problem10.1145/357172.357176 ↗
41. The Internet blockchain: A distributed, tamper-resistant transaction framework for the Internet
42. BGPCoin: A trustworthy blockchain-based resource management solution for BGP security
43. BGPcoin: Blockchain-based internet number resource authority and BGP security solution10.3390/sym10090408 ↗
44. J. Paillisse, M. Ferriol, and E. Garcia, “IPchain: Securing IP prefix allocation and delegation with blockchain,” 2018. Accessed: Dec. 15, 2023. [Online]. Available: https://arxiv.org/abs/1805.04439
45. S. Angieri, A. García-Martínez, B. Liu, Z. Yan, C. Wang and M. Bagnulo, “An experiment in distributed Internet address management using blockchains,” 2018. Accessed: Dec. 15, 2023. [Online]. Available: https://arxiv.org/abs/1807.10528
46. Design and implementation of InBlock—A distributed IP address registration system10.1109/JSYST.2020.3003526 ↗
47. Decentralized Internet number resource management system based on blockchain technology
48. Blockchain-based public key infrastructure for inter-domain secure routing
49. Enhancing border gateway protocol security using public blockchain10.3390/s20164482 ↗
50. I. Sfirakis and V. Kotronis, “Validating IP prefixes and AS-Paths with blockchains,” 2019. Accessed: Dec. 15, 2023. [Online]. Available: https://arxiv.org/abs/1906.03172
51. RouteChain: Towards blockchain-based secure and efficient BGP routing
52. ISRchain: Achieving efficient interdomain secure routing with blockchain10.1016/j.compeleceng.2020.106584 ↗
53. Securing route origin authorization with blockchain for inter-domain Routing
54. ROAchain: Securing route origin authorization with blockchain for inter-domain routing10.1109/TNSM.2020.3015557 ↗
55. Inter-domain prefix and route validation using fast and scalable DAG based distributed ledger for secure BGP routing10.1007/s10922-022-09668-2 ↗
56. DRRS-BC: Decentralized routing registration system based on blockchain10.1109/JAS.2021.1004204 ↗
57. BlockJack: Towards improved prevention of Ip prefix hijacking attacks in inter-domain routing via blockchain
58. A novel routing verification approach based on blockchain for inter-domain routing in smart metropolitan area networks10.1016/j.jpdc.2020.04.005 ↗
59. Preventing route leaks using a decentralized approach
60. A privacy-preserving route leak protection mechanism based on blockchain
61. Blockchain-based validation method for inter-domain routing policy compliance
62. A survey of blockchain consensus algorithms
63. Byzantine fault-tolerant consensus algorithms: A survey