Enhancing Border Gateway Protocol Security Using Public Blockchain

Abstract

Communication on the Internet consisting of a massive number of Autonomous Systems (AS) depends on routing based on Border Gateway Protocol (BGP). Routers generally trust the veracity of information in BGP updates from their neighbors, as with many other routing protocols. However, this trust leaves the whole system vulnerable to multiple attacks, such as BGP hijacking. Several solutions have been proposed to increase the security of BGP routing protocol, most based on centralized Public Key Infrastructure, but their adoption has been relatively slow. Additionally, these solutions are open to attack on this centralized system. Decentralized alternatives utilizing blockchain to validate BGP updates have recently been proposed. The distributed nature of blockchain and its trustless environment increase the overall system security and conform to the distributed character of the BGP. All of the techniques based on blockchain concentrate on inspecting incoming BGP updates only. In this paper, we improve on these by modifying an existing architecture for the management of network devices. The original architecture adopted a private blockchain implementation of HyperLedger. On the other hand, we use the public blockchain Ethereum, more specifically the Ropsten testing environment. Our solution provides a module design for the management of AS border routers. It enables verification of the prefixes even before any router sends BGP updates announcing them. Thus, we eliminate fraudulent BGP origin announcements from the AS deploying our solution. Furthermore, blockchain provides storage options for configurations of edge routers and keeps the irrefutable history of all changes. We can analyze router settings history to detect whether the router advertised incorrect information, when and for how long.

Blockchain-Enabled Cybersecurity Provision for Scalable Heterogeneous Network: A Comprehensive Survey

“…Border Gateway Protocol (BGP) provides the legislation of IP-packets connectivity and transportation among autonomous systems through forwarding to their desired destination, which is known as the de-facto inter-domain routing protocol of the network [29]. The accuracy and validity of packet route announcements are not verified in BGP management [30] where multiple large-scale networks are interconnected without a traffic controller or administrating system. Due to inefficient routing management, the optimal route for data packets to travel to their targeted IP address is not determined, and data packets may take a long time to reach the desired destination or may never arrive.…”

A security framework for Ethereum smart contracts

“…Nowadays there are many tools for the analysis of vulnerabilities in smart contracts and new ones appearing all the time. We have focused in this work on analyzing vulnerabilities in the source code of smart contracts, although there are other works that focus on vulnerabilities in consensus protocols, such as [19,20] or formal verification tools like [21].…”

SAT and SMT-Based Verification of Security Protocols Including Time Aspects

“…For many years, many such protocols used timestamps. In addition, security protocols can be used in IoT systems [ 1 , 2 , 3 , 4 , 5 ]. It is necessary for the appropriate time-dependent management of cryptographic primitives (keys, passwords), especially to preserve and monitor the validity (lifetime) of the primitives.…”