Autonomous Systems (ASes) discover routing paths to the destination AS via BGP announcements advertised by neighbor ASes. However, the actual packets forwarding path may be inconsistent with the announced routing path. The inconsistency could cheat rational ASes to bring a massive commercial benefit to malicious ASes, and cause a great damage on the stability of Internet. Prior work on this issue could be summarized as path verification in the control plane and path probing in the data plane. These countermeasures could not discover the problem in time, and have a lot of overhead. In this paper, we design a Routing Collaboration Accountability Mechanism that enables the source AS of the path to discover the inconsistency. The source and destination AS collect analysis results of forwarded packets in a certain time interval to generate routing evidence. Making use of routing evidence, they collaborate with each other to verify the announced path. It is a lightweight mechanism without packets modification and be suitable in high packet rate network. The evaluation results show that it has less overhead than other methods.
Published in:
Computer Supported Cooperative Work in Design (CSCWD), 2012 IEEE 16th International Conference on
Date of Conference: 23-25 May 2012