An Operational Approach to Validate the Path of BGP

  • Ping Li
  • Wanlei Zhou
  • Ke Li
Part of the Lecture Notes in Computer Science book series (LNCS, volume 5022)


BGP (Border Gateway Protocol) is a fundamental component of the current Internet infrastructure. However, BGP is vulnerable to a variety of attacks, since it cannot ensure the authenticity of the path attributes announced by BGP routers. Despite several solutions have been proposed to address this vulnerability, none of them is operational in real-world due to their immense impact on original BGP. In this paper, we propose a Deployable Path Validation Authentication scheme, which can effectively validate the path of BGP. Through analysis and simulation we show that this scheme has little impact on the performance and memory usage for the original BGP, and can be adopted in practice as an operational approach.


BGP security AS Internet 


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.


  1. 1.
    Rekhter, Y., Li, T., Hares, S.: A Border Gateway Protocol 4 (BGP-4), RFC4271Google Scholar
  2. 2.
    Lynn, C., Seo, K.: Secure BGP (S-BGP),
  3. 3.
    White, R.: Architecture and Deployment Considerations for Secure Origin BGP (soBGP),
  4. 4.
    Bates, T., Rekhter, Y., Chandra, R., Katz, D.: Multiprotocol Extensions for BGP-4, RFC 2858Google Scholar
  5. 5.
    Murphy, S.: BGP Security Vulnerabilities Analysis, RFC 4272Google Scholar
  6. 6.
    Nicol, D.M., Smith, S.W., Zhao, M.: Evaluation of Efficient Security for BGP Route Announcements using Parallel Simulation. J. Simulation Practice and Theory 12, 187–216 (2004)CrossRefGoogle Scholar
  7. 7.
    Hu, Y.-C., Perrig, A., Sirbu, M.: SPV: Secure Path Vector Routing for Securing BGP. In: SIGCOMM 2004, pp. 179–192. ACM Press (2004)Google Scholar
  8. 8.
    Achieve Optimal Routing and Reduce BGP Memory Consumption,

Copyright information

© Springer-Verlag Berlin Heidelberg 2008

Authors and Affiliations

  • Ping Li
    • 1
  • Wanlei Zhou
    • 1
  • Ke Li
    • 1
  1. 1.School of Engineering and Information TechnologyDeakin UniversityMelbourneAustralia

Personalised recommendations