首页|期刊导航|计算机工程|资源公钥基础设施部署问题研究综述

资源公钥基础设施部署问题研究综述OA

Review on Deployment Problems of Resource Public Key Infrastructure

中文摘要英文摘要

资源公钥基础设施(RPKI)是保障边界网关协议(BGP)路由安全性的一项重要机制,通过路由源授权(ROA)和路由源验证(ROV)两项核心功能,实现对自治系统(AS)发布路由宣告的合法性验证.近年来,随着RPKI应用的持续拓展,研究者围绕ROA配置问题与ROV部署测量开展了大量工作,从不同维度刻画了 RPKI在现实网络中的运行状态与防御能力.当前RPKI相关综述集中于对RPKI体系本身研究的阐述,着重强调RPKI体系的脆弱性,对于RPKI实际部署中遇到的关键问题及其相关研究并没有进行系统梳理和深入总结.首先,对近年来RPKI系统部署问题的相关研究进行了系统综述,重点梳理了 ROA配置中常见错误类型,包括ROA良性冲突以及松散ROA展开系统性分析,揭示其成因及其对路由安全的影响;然后,对现有的ROV部署测量方法进行了综合归纳与对比分析,同时总结了对ROV验证有效性与路径传播影响的评估方法;最后,给出RPKI部署问题研究的未来发展方向,为后续在RPKI部署优化、安全评估与策略研究等方向提供了理论基础与方法参考,有利于促进RPKI体系的部署推广,有效防御BGP前缀劫持.

Resource Public Key Infrastructure(RPKI)is an important mechanism for safeguarding Border Gateway Protocol(BGP)routing security,which verifies the legitimacy of BGP announcements through Route Origin Authorization(ROA)and Route Origin Validation(ROV).As RPKI continues to advance globally,its deployment status and defense effects have become prominent research hotspots.In recent years,researchers have extensively studied ROA configuration problems and ROV deployment measurements extensively,demonstrating the operational status and protection capability of RPKI in real networks from different dimensions.Current surveys mainly focus on theoretical research on RPKI systems,emphasizing architectural vulnerabilities without systematically organizing or summarizing the key challenges and related studies encountered in their actual deployment.This review systematically summarizes recent studies on the deployment issues of RPKI systems.First,it focuses on classifying common error types in ROA configurations,including benign ROA conflicts and loose ROA registrations,and analyses their causes and impacts on routing security systematically.Then,it comprehensively summarizes and compares existing ROV deployment measurement methods and reviews evaluation methods for assessing ROV validation effectiveness and its impact on path propagation.Finally,the review outlines future research directions to address RPKI deployment issues,providing a theoretical foundation and methodological reference for subsequent research on RPKI deployment optimization,security assessment,and strategy research.The findings can promote the widespread adoption of RPKI and enhance the defense against BGP prefix hijacking.

杨国正;齐冬震;陈攀;沈照斌;尹鹏语;霍彦霖

国防科技大学电子对抗学院,安徽 合肥 230037||网络空间安全态势感知与评估安徽省重点实验室,安徽 合肥 230037国防科技大学电子对抗学院,安徽 合肥 230037||网络空间安全态势感知与评估安徽省重点实验室,安徽 合肥 230037国防科技大学电子对抗学院,安徽 合肥 230037||网络空间安全态势感知与评估安徽省重点实验室,安徽 合肥 230037国防科技大学电子对抗学院,安徽 合肥 230037||网络空间安全态势感知与评估安徽省重点实验室,安徽 合肥 230037国防科技大学电子对抗学院,安徽 合肥 230037国防科技大学电子对抗学院,安徽 合肥 230037||网络空间安全态势感知与评估安徽省重点实验室,安徽 合肥 230037

信息技术与安全科学

路由安全边界网关协议前缀劫持资源公钥基础设施路由源授权路由源验证

route securityBorder Gateway Protocol(BGP)prefix hijackingResource Public Key Infrastructure(RPKI)Route Origin Authorization(ROA)Route Origin Validation(ROV)

《计算机工程》 2026 (6)

17-30,14

国家自然科学基金面上项目(62271496).

10.19678/j.issn.1000-3428.0252551

评论