域间路由协议前缀劫持行为模拟与分析

摘要

The inter-domain routing system based on BGP is the core infrastructure of the Internet. It is also the key to ensuring interconnection and normal operation of the entire network. However, the BGP protocol itself is highly vulnerable to attacks due to the lack of necessary security mechanisms. For example, the BGP prefix hijacking is the one that is difficult to prevent. In recent years, there have been many BGP prefix hijacking incidents that caused serious harms. We have constructed a large-scale software simulation environment for inter-domain routing systems based on GTNetS, and have made a large number of BGP prefix hijacking tests, and we have studied the factors related to the attack scope of prefix hijacking. The tests show that the damage range caused by the BGP prefix hijacking has direct relationships with the levels and degrees of the AS from which the prefix hijacking is launched.%基于BGP的域间路由系统是Internet的核心设施,是保证整个网络互联及正常运行的关键.然而,由于BGP协议本身缺乏必要的安全机制而极易受到攻击.例如,前缀劫持就是针对BGP缺陷而实施的一种较难防范的攻击.近年来,已发生多起BGP前缀劫持事件,造成了严重危害.本文基于GTNetS软件构建了一个大规模域间路由系统模拟环境,并在该模拟环境中进行了多次BGP前缀劫持测试,结合测试结果分析对影响BGP前缀劫持攻击范围的有关因素进行了研究.测试表明,BGP前缀劫持造成的受害范围与攻击发起路由器所属AS的层次和度数有着直接的关系.