A distributed multi-hub translator trust model for interdomain routing in large networks

Abstract

As a significant component in the Internet routing system, BGP has drawn much attention from the research area, especially on the security issues. In this paper, through studying and analyzing TTM (Translator Trust Model) of BGP security solution - SE-BGP (Security Enhanced BGP), we found a critical weakness in TTM is that excessive traffic flow and verification burdens on a single hub node can easily lead to node failure and network paralysis. Based on exploring the clustering characteristic of the AS-level network topology, this paper constructs a new structure DMHS (Distributed Multihub Structure) and develops a novel model DTTM (Distributed Translator Trust Model) to address the problem caused by a single hub node. Furthermore, we propose the countermeasures to cope with the case of hub node failures. Finally, the experiment and analysis show our scheme can effectively lower the cost, reduce the number of certificates and improve the scalability.