A Scheme for Securing Traffic Transport among Autonomous Systems

By using existing mechanisms, especially for SBGP, IP prefix hijacking and AS-PATH tampering can be prevented despite some unsatisfied inherent factors. However, except IP prefix hijacking and AS-PATH tampering, there are some other traffic attraction attacks, which are currently not considered and prevented in existing mechanisms. Attracting more by announcing long paths, which is typical one of these traffic attraction attacks, can be prevented by the presented method. The presented method, which consists of two algorithms, adds the sequence of relationship marks in update messages and verifies them. Moreover, the presented method combines the mechanisms of authenticating origin AS and AS-PATH. Two algorithms, one of which is executed on senders and the other is executed on receivers, are given. The presented method can defend against the attack that is attracting more by announcing long paths, besides IP prefix hijacking and ASPATH tampering. To the best of our knowledge, it is the first work for defending against the attack that is attracting more by announcing long paths.