Research And Application Of Security Testing Technology For Inter-domain Routing System

While a number of key Internet based application services such as e-commerce, e-banking are rolling out, the Internet is playing an increasingly role in people's daily life. However, the Internet also provides a profit-making platform for the lawless elements when we are enjoying the convenience that it brings to us. In recent years, the rising network crimes have brought large economic losses and blocked the development of society badly. As the core of the Internet, the security of inter-domain routing system is particularly crucial to the whole Internet.On the basis of the analyzing on the security vulnerability of inter-domain routing system, we point out the potential threats and attacks brought by them. To solve these problems, the security testing in inter-domain routing system is necessary and of great significance. We propose a new method to attack routers using routing stress and to send mass emails based on routing poisoning. Compared with traditional methods, we show the enormous threats brought by the new methods to inter-domain routing system.Based on the theoretical analysis above, we design and implement an inter-domain routing system security tool, En-Quagga. Our tool consists of three major components, router security testing sub-system, BGP protocol security testing sub-system and the network application based on routing poison sub-system. We then use En-Quagga to test the inter-domain routing system in various conditions. With the help of experiment results, we give some advices on how to enhance the security of the inter-domain routing system and the network applications deployed in the inter-domain routing system.Finally, we conclude the contributions of our works, and then give an expectation of our future work.