基于AS-Path混淆的域间路由隐蔽通信方法

Covert communication for inter-domain routing based on AS-Path confusion

当前域间路由系统安全防护面临的威胁愈加严重,隐蔽作为一种主动防御技术,能够有效改善攻防双方信息不对等的局面。借鉴移动目标防御思想,构建多自治系统联盟,在此基础上针对域间路由更新数据报的AS-Path属性实施混淆,进而达到欺骗联盟外潜在攻击者的目标。仿真实验结果显示:混淆过程具有较好的时间复杂度,且混淆后的AS-Path序列明显区别于原始序列,从而实现了联盟内多自治系统的隐蔽通信。

Nowadays the security protection of inter domain routing system is facing more and more serious threats.As a proactive defense technology,covert technology can effectively improve the situation of unequal information possession between attacking and defending parties.Inspired by the idea of moving target defense,through constructing a multiple autonomous system alliance,the AS-Path attribute of Update datagram can be confused so as to deceive potential attackers outside the alliance.The simulation results show that the confusion process has better time complexity performance,and the AS-Path sequence after confusion is obviously different from the original sequence,which can realize the covert communication among the autonomous systems inside the alliance.