A distributed reputation approach to cooperative Internet routing protection

摘要: The security of the Internet's interdomain routing system hinges on whether autonomous systems (ASes) can trust information they receive from each other via border gateway protocol (BGP). Frequently, this has been misguided, resulting in wide-spread outages and significant concerns about future attacks. Despite seriousness these problems, proposals for a more secure version BGP have stymied by serious impediments to practical deployment. Instead, we argue that existing relationships between network operators (and institutions represent) are powerful force improving BGP, without changing underlying protocol. Our approach leverages ideas online reputation allow ASes form peer-to-peer overlay integrates results local network-management tools detecting attacks configuration errors. proposed architecture is incrementally deployable, protects against shilling attacks, deters malicious operator behavior.