Paper Info
Title
CENTRA: CENtrally Trusted Routing vAlidation for IGP
Abstract
Trusted routing is a hot spot in network security. Lots of efforts have been made on trusted routing validation for Interior Gateway Protocols (IGP), e.g., using Public Key Infrastructure (PKI) to enhance the security of protocols, or routing monitoring systems. However, the former is limited by further deployment in the practical Internet, the latter depends on a complete, accurate, and fresh knowledge base-this is still a big challenge (Internet Service Providers (ISPs) are not willing to leak their routing policies). In this paper, inspired by the idea of centrally controlling in Software Defined Network (SDN), we propose a CENtrally Trusted Routing vAlidation framework, named CENTRA, which can automated collect routing information, centrally detect anomaly and deliver secure routing policy. We implement the proposed framework using NETCONF as the communication protocol and YANG as the data model. The experimental results reveal that CENTRA can detect and block anomalous routing in real time. Comparing to existing secure routing mechanism, CENTRA improves the detection efficiency and real-time significantly.
Year
DOI
Venue
2017
10.1109/CyberC.2017.75
2017 International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery (CyberC)
Keywords
Field
DocType
Trusted Routing,Centrally Controlling,SDN,IGP,OSPF,Neighbor,NETCONF,YANG
Public key infrastructure,NETCONF,Authentication,Computer science,Network security,Computer network,Default gateway,The Internet,Communications protocol,Routing protocol
Conference
ISBN
Citations 
PageRank 
978-1-5386-2210-0
0
0.34
References 
Authors
4
4
Name
Order
Citations
PageRank
Hao Zeng184.60
Baosheng Wang25411.05
Wenping Deng3184.94
Xianming Gao413.40