%0 Journal Article
%T BGP Extension to Support Inter-Domain Distributed Packets Filtering<br>支持域间分布式分组过滤的BGP扩展
%A WANG Li-Jun
%A WU Jian-Ping
%A XU Ke
%A <br>王立军
%A 吴建平
%A 徐恪
%J 软件学报
%D 2007
%I 
%X To be trustworthy is an important characteristic of the next generation Internet.The routing system of the present Internet forwards packets only according to the destination IP address.Forged packets with spoofed source IP address will also be forwarded to the destination,which impairs the security of receiver and conceals the real identity of the sender.The trustworthy Internet requires the routing system not only forward packets correctly, but also validate the packets from the real sender.Inter-domain distributed packet filtering is an effective method to filter out spoofed packets.This paper proposes to extend BGP with route selection notice to provide filtering criteria. With the support,border routers can validate incoming packets and filter the spoofed packets form false autonomous systems.Simulation result indicates BGP route selection notice does not impair the routing function of BGP,and both proper design acceptable bandwidth cost and fast convergence may be achieved simultaneously.
%K trustworthy Internet
%K border gateway protocol(BGP)
%K inter-domain routing
%K distributed packets filtering<br>可信任互联网
%K 边界网关协议
%K 域间路由
%K 分布式分组过滤
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=7735F413D429542E610B3D6AC0D5EC59&aid=3D0CF9E8483A1353D39134CA4509117B&yid=A732AF04DDA03BB3&vid=13553B2D12F347E8&iid=59906B3B2830C2C5&sid=CB79A599A908C3EC&eid=D83992B9057CFAA6&journal_id=1000-9825&journal_name=软件学报&referenced_num=0&reference_num=22