Faculty of Informatics and Information Technologies, Slovak University of Technology in Bratislava, Ilkovicova 2, 842 16 Bratislava, Slovakia.
Sensors (Basel). 2022 Feb 13;22(4):1437. doi: 10.3390/s22041437.
The whole Internet consists of thousands of autonomous systems that transfer data with one another. The BGP plays a significant role in routing, but its behaviour is essentially naive, trusting neighbours without authenticating advertised IP prefixes. This is the main reason why BGP endures various path manipulation attacks. Recently, conventional methods for securing BGP have been implemented, i.e., BGPSec with RPKI. However, these approaches are centralised with a single point of failure that may be compromised, invalidating the whole security mechanism. There have been multiple decentralised projects dealing with various mechanisms, mostly built on Ethereum and blockchain networks. Some with ambition to strengthen existing centralised mechanisms, others to replace them. In this article, we present the first comprehensive survey on blockchain solutions to enforce BGP security, with complex explanations of their contributions and a comparison with different aspects. We explain how blockchain technology can provide an alternative to prevent the false origin of IP prefixes or hijacking AS paths. Moreover, we describe new blockchain-based attacks that BGP would face after the inclusion of blockchain into the inter-domain routing. Finally, we answer the defined research questions and discuss the potential open issues for further study.
整个互联网由数千个自治系统组成,这些系统相互传输数据。BGP 在路由中起着重要作用,但它的行为本质上是幼稚的,信任邻居而不验证所宣传的 IP 前缀。这就是 BGP 承受各种路径操纵攻击的主要原因。最近,已经实施了传统的 BGP 安全方法,即带有 RPKI 的 BGPSec。然而,这些方法是中心化的,存在单点故障,可能会被攻破,从而使整个安全机制失效。已经有多个去中心化的项目涉及各种机制,其中大部分是基于以太坊和区块链网络构建的。有些项目旨在加强现有的集中机制,有些则旨在取代它们。在本文中,我们首次全面调查了区块链解决方案在加强 BGP 安全方面的应用,详细解释了它们的贡献,并对不同方面进行了比较。我们解释了区块链技术如何能够提供一种替代方法来防止 IP 前缀的虚假起源或劫持 AS 路径。此外,我们描述了 BGP 在将区块链纳入域间路由后将面临的新的基于区块链的攻击。最后,我们回答了定义的研究问题,并讨论了进一步研究的潜在开放性问题。