基于签名机制和信任理论的可信任BGP路由协议研究

Constructing trustworthy BGP routing protocol by trustworthiness,controllability and scalability becomes a common concerned topic to reasearchers,equipment manufacturers and Internet service providers,and is also a hot topic in network research area. In the process of constructing trustworthiness of routing information and router,as well as easy deployment for the BGP protocol. In this proposal,we mainly focus on constructing trusted routing protocol under the idea of lightweight framework.We mainly focus on the following topics:(1)We will deeply study protection mechanism for the trustworthiness of routing information,and provide a pratically and significatively fundamental theory for protecting routing information.(2)We will study the trust models for the BGP's routers based on trust theory,and setup routing trust theory.(3)We will study the mechanism for trustworthy routing announcement and how to influence network performance,provide announcement method and technology for trustworthy routing theory.The research theories, methods and conclusions presented in this project have great potential application value in the next generation network architecture, protocols and cyberspace security.So the project has a great research significance from the theory and practice.

以可信、可控和可扩展为目标而构建可信任的BGP路有协议已成为计算机领域一个非常重要和迫切需要解决的课题，已成为当前研究者、设备制造商和网络服务提供商共同关注的主题，也是当前网络领域的研究热点。在可信任路由协议的研究过程中，需要综合考虑路由信息可信性、路由器可信性，以及协议的易部署性。本项目提出轻量型的思想框架下研究BGP协议路由的可信性问题。研究内容包括：（1）深入研究适合BGP协议路由信任的保护机制和理论，为路由信息保护提供更为实用和有意义的理论基础模型；（2）基于信任理论的路由器信任模型研究，建立路由信任基础理论；（3）可信任路由决策机制研究，提供可信任路由选取的方法和技术。本项目提出的研究理论、方法和结论在下一代网络体系、协议和网络空间安全相关的主题研究中具有巨大的潜在应用价值。因此，本项目无论从理论上还是从实践上都具有极强的研究意义。

本项目在研究过程中已按照既定的研究计划进行，主要成果包括：（1）在BGP协议路由信任的保护机制和理论研究方面，我们提出了两种可以用于保护路由宣告信息的轻量型数字签名算法，同时还给出针对BGP路由前缀劫持检测方法；（2）在基于信任理论的路由器信任模型研究方面，我们给出用于刻画BGP路由器信任度的模型和算法；（3）在可信任路由决策机制研究方面，我们从邻居BGP的可信性入手，提出可信任路由选取的方法和技术。因此，本项目无论从理论上还是从实践上都具有极强的研究意义。