区块链技术在域间路由安全领域的应用研究

互联网域间路由系统的安全问题一直备受关注.实现全网范围的互联网资源管理认证和可信跨域协作至关重要.区块链技术以其去中心化、防篡改、可追溯等天然属性,可作为域间网络资源认证与信任建立的基础.首先分析域间路由系统安全脆弱性及其影响,以及传统域间路由安全机制面临的部署困难、管理复杂、信任中心化等困境;然后,在简要介绍区块链技术基本理论的基础上指出区块链技术运用于域间路由系统安全的技术思路,并详述区块链技术应用于域间路由认证、域间智能管理和域间DDoS防御等方面的最新进展;最后,分析区块链应用于域间路由安全领域的优势,从性能与规模、兼容性与增量部署以及区块链自身安全问题这3个方面分析其问题与挑战,并对下一步研究进行展望.

Research on Blockchain-based Interdomain Security Solutions

Much attention has been paid to the security of interdomain routing system. It is crutial to achieve the origin validaton of Internet resource and multi-domain collaboration. By virtue of the natural attributes of blockchain including decentralization, tamper-resistant and traceability, blockchain technology can act as the basis of Internet resource certification and trust establishment among multiple Internet domains. Firstly, we analyze the vulnerabilities of interdomain routing system and the dilemma of existing interdomain security proposals including difficulty in deployment, complexity in management, centralized trust mechanism et.al. Secondly, based on the introduction of the basic concept of blockchain, we point out the technical ideals of blockchain-based interdomain security solutions, and conduct an up-to-date review of blockchain-based interdomain security solutions from 3 aspects:interdomain routing authentication, intelligent interdomain management, and DDoS defense and mitigation. Finally, we summarize the advantages of blockchain-based interdomain security solutions, analysis corresponding challenges from the perspectives of scalability, deployment and security, and highlight the development outlook of blockchain technology used in the field of interdomain routing security.