| 本文已被：浏览 7239次 下载 12277次 |
码上扫一扫！ |
|
|
| 区块链技术在域间路由安全领域的应用研究 |
|
陈迪1,2,3, 邱菡1,2, 朱俊虎1,2, 王清贤1,2
|
|
1.中国人民解放军战略支援部队 信息工程大学, 河南 郑州 450002;2.数学工程与先进计算国家重点实验室, 河南 郑州 450002;3.中国洛阳电子装备实验中心, 河南 洛阳 471003
|
|
| 摘要: |
| 互联网域间路由系统的安全问题一直备受关注.实现全网范围的互联网资源管理认证和可信跨域协作至关重要.区块链技术以其去中心化、防篡改、可追溯等天然属性，可作为域间网络资源认证与信任建立的基础.首先分析域间路由系统安全脆弱性及其影响，以及传统域间路由安全机制面临的部署困难、管理复杂、信任中心化等困境；然后，在简要介绍区块链技术基本理论的基础上指出区块链技术运用于域间路由系统安全的技术思路，并详述区块链技术应用于域间路由认证、域间智能管理和域间DDoS防御等方面的最新进展；最后，分析区块链应用于域间路由安全领域的优势，从性能与规模、兼容性与增量部署以及区块链自身安全问题这3个方面分析其问题与挑战，并对下一步研究进行展望. |
| 关键词: 域间路由安全 区块链 互联网资源管理 路由认证 |
| DOI：10.13328/j.cnki.jos.005867 |
| 分类号:TP393 |
| 基金项目:国家自然科学基金（61502528，61902447） |
|
| Research on Blockchain-based Interdomain Security Solutions |
|
CHEN Di1,2,3, QIU Han1,2, ZHU Jun-Hu1,2, WANG Qing-Xian1,2
|
|
1.PLA Strategic Support Force, Information Engineering University, Zhengzhou 450002, China;2.State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou 450002, China;3.Luoyang Electronic Equipment Test Center of China, Luoyang 471003, China
|
| Abstract: |
| Much attention has been paid to the security of interdomain routing system. It is crucial to achieve the origin validation of Internet resource and multi-domain collaboration. By virtue of the natural attributes of blockchain including decentralization, tamperresistant, and traceability, blockchain technology can act as the basis of Internet resource certification and trust establishment among multiple Internet domains. Firstly, the vulnerabilities of interdomain routing system and the dilemma of existing interdomain security proposals are analyzed including difficulty in deployment, complexity in management, centralized trust mechanism, etc. Secondly, based on the introduction of the basic concept of blockchain, the technical ideals of blockchain-based interdomain security solutions are pointed out, and an up-to-date review of blockchain-based interdomain security solutions is conducted from 3 aspects:interdomain routing authentication, intelligent interdomain management, and DDoS defense and mitigation. Finally, the advantages of blockchain-based interdomain security solutions are summarized and corresponding challenges are analyzed from the perspectives of scalability, deployment, and security, and the development outlook of blockchain technology used in the field of interdomain routing security is highlighted. |
| Key words: interdomain routing security blockchain Internet number resource certification route origin attestation |
