Article: Efficient authentication and integrity protection for the border gateway protocol Journal: International Journal of Security and Networks (IJSN) 2014 Vol.9 No.4 pp.234 - 243 Abstract: The border gateway protocol (BGP) has been used for internet interdomain routing since 1989. However, this protocol has many security vulnerabilities, and is therefore the focus of ongoing research. A fast and efficient protocol, with strong security features, including signature based authentication is ideal. Some alternatives to BGP have previously been proposed for implementation, but these are yet to be adopted. Computational overheads and infrastructure requirements on the network system, or the absence of some key security features are preventing their adoption. In this paper, we introduce a protocol with significant improvements to BGP, addressing its three major security vulnerabilities. We propose a new protocol from a concept within in the append only signature (AOS) scheme, but in a more realistic broadcast model. Our protocol has better efficiency and security, by using pre-computation of signatures, and server aided verification. We also include signature aggregation features to minimise signature size, to further improve efficiency. Inderscience Publishers - linking academia, business and industry through research

Title: Efficient authentication and integrity protection for the border gateway protocol

Authors: Jennifer Seberry; Yi Mu; Fuchun Guo; Tim Wellsmore

Addresses: School of Computer Science and Software Engineering, University of Wollongong, Wollongong, 2500, NSW, Australia ' School of Computer Science and Software Engineering, University of Wollongong, Wollongong, 2500, NSW, Australia ' School of Computer Science and Software Engineering, University of Wollongong, Wollongong, 2500, NSW, Australia ' School of Computer Science and Software Engineering, University of Wollongong, Wollongong, 2500, NSW, Australia

Abstract: The border gateway protocol (BGP) has been used for internet interdomain routing since 1989. However, this protocol has many security vulnerabilities, and is therefore the focus of ongoing research. A fast and efficient protocol, with strong security features, including signature based authentication is ideal. Some alternatives to BGP have previously been proposed for implementation, but these are yet to be adopted. Computational overheads and infrastructure requirements on the network system, or the absence of some key security features are preventing their adoption. In this paper, we introduce a protocol with significant improvements to BGP, addressing its three major security vulnerabilities. We propose a new protocol from a concept within in the append only signature (AOS) scheme, but in a more realistic broadcast model. Our protocol has better efficiency and security, by using pre-computation of signatures, and server aided verification. We also include signature aggregation features to minimise signature size, to further improve efficiency.

Keywords: BGP; border gateway protocol; authentication; integrity; Schnorr; network security; AOS; append only signature.

DOI: 10.1504/IJSN.2014.066179

International Journal of Security and Networks, 2014 Vol.9 No.4, pp.234 - 243

Received: 21 Feb 2013
Accepted: 01 Oct 2013
Published online: 04 Dec 2014 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article

Title: Efficient authentication and integrity protection for the border gateway protocol

Keep up-to-date