A survey on the recent efforts of the Internet Standardization Body for securing inter-domain routing

Abstract

The Border Gateway Protocol (BGP) is the de-facto inter-domain routing protocol in the Internet, thus it plays a crucial role in current communications. Unfortunately, it was conceived without any internal security mechanism, and hence is prone to a number of vulnerabilities and attacks that can result in large scale outages in the Internet. In light of this, securing BGP has been an active research area since its adoption. Several security strategies, ranging from a complete replacement of the protocol up to the addition of new features in it were proposed, but only minor tweaks have found the pathway to be adopted. More recently, the IETF Secure Inter-Domain Routing (SIDR) Working Group (WG) has put forward several recommendations to secure BGP. In this paper, we survey the efforts of the SIDR WG including, the Resource Public Key Infrastructure (RPKI), Route Origin Authorizations (ROAs), and BGP Security (BGPSEC), for securing the BGP protocol. We also discuss the post SIDR inter-domain routing unresolved security challenges along with the deployment and adoption challenges of SIDR's proposals. Furthermore, we shed light on future research directions in managing the broader security issues in inter-domain routing. The paper is targeted to readers from the academic and industrial communities that are not only interested in an updated article accounting for the recent developments made by the Internet standardization body toward securing BGP (i.e., by the IETF), but also for an analytical discussion about their pros and cons, including promising research lines as well.

Profiling BGP Serial Hijackers

“…BGP vulnerabilities and hijacks have been studied for a long time [10,13,36,37,52]. However, proposals to secure BGP have not gained widespread traction.…”

The state of affairs in BGP security: A survey of attacks and defenses

“…While we still describe some early approaches also covered by [22,24,25], we use them as a baseline to show the reader how each group of BGP security solutions has evolved in recent decades. Recently, Siddiqui et al [26] and Al-Musawi et al [28] also presented surveys on BGP security. Contrary to our work, they either reviewed the standardization efforts made by the IETF SIDR WG only or focused on detection techniques and completely ignored BGP security proposals.…”

“…Recently, Siddiqui et al [26] reviewed the standardization efforts made by the IETF Secure Inter-Domain Routing Working Group (SIDR WG) to secure BGP, but focused on two major security extensions only. Cardona et al [27] focused on contributions intended to improve only the availability of BGP networks.…”

BGPcoin: Blockchain-Based Internet Number Resource Authority and BGP Security Solution

“…One of the most crucial problems is securing inter-domain routing [17][18][19]. The BGP security problem has been emphasized by many notable attacks and configuration errors (e.g., [1][2][3]).…”