边界网关协议BGP-4的安全扩展

Security Extension of Border Gateway Protocol BGP-4

文章分析了边界网关协议BGP4的安全弱点 ,针对这些安全弱点对协议进行了扩展 .通过数字签名技术来保护AS-PATH属性中的信息 .为了适应分布式路由协议的特点 ,提出了分布式的基于RSA的密钥生成算法 .通过综合运用这些技术 ,在基本保持报文长度不变的情况下有效地保护了BGP协议信息的机密性。

The security weakness of Border Gateway Protocol (BGP 4) is analyzed.Aiming at the weakness,the protocol are extended with some security properties.Digital signature mechanism is used to protect the AS -PATH information.To satisfy the characteristic of distributed routing protocol,a distributed key generation algorithm based on RSA is presented.By integrating these techniques,confidentiality,creditability and integrity of BGP are protected in keeping the packet length with near constant space.