loading...
Pretty Good BGP: Improving BGP by Cautiously Adopting Routes
Fess parker's Doubletree, Santa Barbara, Ca, USA November 12-November 15
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ICNP.2006.320179Proceedings of the 2006 IEEE Internat ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Josh Karlin, University of New Mexico, karlinjf@cs.unm.edu
Stephanie Forrest, University of New Mexico, Santa Fe Institute, forrest@cs.unm.edu
Jennifer Rexford, Princeton University, jrex@cs.princeton.edu
The Internet's interdomain routing protocol, BGP, is vulnerable to a number of damaging attacks, which often arise from operator misconfiguration. Proposed solutions with strong guarantees require a public-key infrastructure, accurate routing registries, and changes to BGP. However, BGP routers can avoid selecting and propagating these routes if they are cautious about adopting new reachability information. We describe a protocol-preserving enhancement to BGP, Pretty Good BGP (PGBGP), that slows the dissemination of bogus routes, providing network operators time to respond before problems escalate into large-scale Internet attacks. Simulation results show that realistic deployments of PGBGP could provide 99% of Autonomous Systems with 24 hours to investigate and repair bogus routes without affecting prefix reachability. We also show that without PGBGP, 40% of ASs cannot avoid selecting bogus routes; with PGBGP, this number drops to less than 1%. Finally, we show that PGBGP is incrementally deployable and offers significant security benefits to early adopters and their customers.
Citation:
Josh Karlin, Stephanie Forrest, Jennifer Rexford, "Pretty Good BGP: Improving BGP by Cautiously Adopting Routes," icnp, pp.290-299, Proceedings of the 2006 IEEE International Conference on Network Protocols, 2006
Usage of this product signifies your acceptance of the Terms of Use.