1
SECURING BGP – A LITERATURE SURVEY Presented by:
Tony Reveldez
GEOFF HUSTON
B.Sc., M.Sc.Australian National
University
MATTIA ROSSI
B.Eng.,M.Sc.Leopold-
Franzens-Universitaet
GEOFF ARMITAGE B.Sc., PhD.Swinburne
University of Technology
2
Border Gateway Protocol
What is it? iBGP vs eBGP TCP/IP Distant Vector Routing
Path Vector Routing
Route Selection Process Messages
AS Path
3
BGP Threat Model
Securing the BGP Session Injection, eavesdropping, delay messages, replay
Verifying BGP Identity Are you really who you claim to be?
Verifying BGP Information Is your information complete?
Verifying Forwarding Paths Is my information accurate?
4
Consequences of Attacks on the Routing System
Denial of Service
the potential to masquerade Address Stealing
The ability to eavesdrop
www.fireblog.com
5
Securing BGP
The Security Toolset Security Requirements
Securing the data payload and semanticsPiecemeal incremental deployment
Approaches to Securing BGPsBGP, soBGP, psBGP, pgBGP, IRV
6
Approaches to Securing BGP
Securing the operation of BGPTCP sessionGTSMTCP MD5IPSEC
Security in the Data Level
7
Securing the Integrity of BGP Data
sBGP soBGP
psBGP
IRV pgBGP
8
State of BGP Security
As the table shows, of all proposals, only a few have been implemented and mostly not deployed
