域间路由协同监测中的信息共享机制

摘要

The cooperative routing monitoring constructs a more complete global information view by information sharing among autonomous systems (ASes), which can eliminate the negative impact of the autonomous inter-domain routing system characteristic and improve the route monitoring ability of AS. This paper designs an information sharing mechanism called CoISM that is based on self-organization for the information sharing, which is the essential issue of cooperative route monitoring. CoISM leverages the localization caused by BGP policy to reduce and control the transmit range of information. It also uses information reflection to implement the information active push and builds AS profit on its altruistic information sharing behavior. This mechanism leads to information aggregation, as needed in self-organization, and facilitates cooperation among AS by its incentive.CoISM adopts a distributed architecture and has good expansibility and a lower communication overhead. In addition, it does not modify the BGP protocol, but supports an incremental deployment and can be used in many cross-domain cooperative management applications such as inter-domain routing monitoring, cooperative routing failure analysis, cooperative intrusion detection, and so on.%路由协同监测通过在自治系统之间共享路由监测信息来形成更为完整的全局监测视图,从而克服域间路由系统自治性的制约,提高单个自治系统的路由监测能力.针对路由协同监测的核心问题--监测信息共享,基于自组织思想设计了信息共享机制CoISM.该机制利用BGP路由策略引起的信息局部性对路由监测信息的传播范围进行裁减和控制,在被动查询的基础上增加了信息"反射"行为,利用路由监测信息之间的相关性实现信息的主动推送,将自治系统的利益建立在主动信息共享这一利他行为的基础上.CoISM能够引导自治系统实现路由监测信息的自组织聚合与按需共享,具有激励性,能够促进自治系统之间的协同.该机制采用分布式体系结构,具有良好的扩展性和较低的通信开销,不需要修改BGP协议,支持可渐进部署,适用于域间路由协同监测、路由故障协同分析、协同入侵检测等多种跨域协同管理应用.