CAJ | 학술논문

由于不同域之间的利益和安全策略存在复杂的竞争与冲突，域间路由安全问题一直具有挑战性。当前相关研究主要集中于路由源可信性与路径信息可信性等方向，但对域间路由策略实施可信性则较少关注。设计了一种多路径域间路由决策检测协议，可验证一个自治域是否遵守从N条目的地相同的候选路径中选择合适的M条路径发送往下游自治域的路由选择决策承诺。分析表明协议正确有效，同时可以抵抗伪造、篡改和重放等攻击，且具有增量部署和尊重参与者隐私的特性。
유우불동역지간적이익화안전책략존재복잡적경쟁여충돌，역간로유안전문제일직구유도전성。당전상관연구주요집중우로유원가신성여로경신식가신성등방향，단대역간로유책략실시가신성칙교소관주。설계료일충다로경역간로유결책검측협의，가험증일개자치역시부준수종N조목적지상동적후선로경중선택합괄적M조로경발송왕하유자치역적로유선택결책승낙。분석표명협의정학유효，동시가이저항위조、찬개화중방등공격，차구유증량부서화존중삼여자은사적특성。
Because of complicated security policy collisions and twisted interest conflicts between different network do-mains, interdomain routing security has been one challenge of secure routing.At present most of related researches fo-cus on the authentication of routing source and true path, but seldom address another point of whether the routing deci-sion process matches expected policy.A multipath interdomain routing decision verification protocol was designed, which can check whether an AS keeps its promise about choosing appropriate M from N paths that have the same desti-nation and are received from upstream ASs, and sending to a downstream AS.According to the analysis, the protocol is valid and respects the privacy of participants, as well as can resist attacks such as forgery, tampering and replay etc. and deploy on internet incrementally.