DISCA: Decentralized Infrastructure for Secure Community Attribute certifying

Abstract

Inter-domain routing is the cornerstone of the modern Internet, and the security of inter-domain routing is very important to the reliability and security of Internet basic services. However, BGP protocol, as a current standard inter-domain routing protocol, lacks security considerations at the beginning of its design and does not authenticate routing messages. Because the BGP Community attribute is widely used, researchers have found a variety of new routing attacks using the Community attribute. This kind of attack is more covert and flexible, the detection mechanism is difficult to detect its existence, and the current trusted verification scheme can not completely defend against this kind of attack. In order to solve the above problems, this paper proposes a BGP Community attribute authentication scheme based on blockchain. This scheme authenticates the use of BGP Community attributes based on the blockchain smart contract for the first time. Based on the routing source authentication provided by the routing source authentication mechanism, this scheme further puts forward the concept of "the right to know about using". Through the agent authentication mechanism, it can effectively resist a variety of new routing attacks without changing the existing BGP routing protocol.