30 likes | 131 Views
Accountable Internet Protocol. David Andersen (CMU) Hari Balakrishnan (MIT) Nick Feamster (Georgia Tech) Scott Shenker (Berkeley). http://www.aip-arch.net /. Many Security Problems/Point Solutions. For each problem, point solutions
E N D
Accountable Internet Protocol David Andersen (CMU)Hari Balakrishnan (MIT) Nick Feamster (Georgia Tech) Scott Shenker (Berkeley) http://www.aip-arch.net/
Many Security Problems/Point Solutions • For each problem, point solutions • Fundamental problem: accountability is not intrinsic to current Internet architecture
AD1 AD2 Accountable Internet Protocol • Key idea: New addressing for networks and hosts • Other protocols can use this property as foundation: (Anti-spoofing, secure routing, DDoS shut-off, etc.) • AD and EID are self-certifying flat names • AD = hash( public_key_of_AD ) • Self-certification binds name to named entity Address Structure Application: Anti-Spoofing 1. Send P Address = AD1:EID 2. Sent P? {nonce} A If multihomed, has multiple addressesAD1:EID,AD2:EID,AD3:EID 3. Yes! { hash(P), nonce } K-1 A Signed with private key corresponding to EID A