IP network two-stage fault-tolerance intrusion-tolerance routing mechanism based on faith

Abstract

The invention discloses a two-stage fault tolerant and intrusion tolerant routing mechanism for an IP network based on trust. The mechanism is divided into two stages: the first stage is routing discovery, namely, a plurality of credible paths are discovered; the second stage is optimal path selection, namely, the optimal path for routing is selected from the discovered paths. In the first stage, the mechanism utilizes a trust relationship appraisal method of blending multiplication and addition and effectively improves the fault tolerant and intrusion tolerant performance of an IP network router. In the second stage, users always use the optimal router for communication by a path grading strategy, thus effectively avoiding various attacks to the paths. In addition, the invention also describes a definition, measurement, updating and an obtaining method of a trust value with fault tolerant and intrusion tolerant performance in detail.

Description

Trust-based two-stage fault-tolerant and intrusion-tolerant routing mechanism for IP networks technical field The invention relates to the technical field of communication, in particular to a trust-based two-stage fault-tolerant and intrusion-tolerant routing mechanism of an IP network. Background technique Network routing security is the top priority of network security. However, current IP network routers can only simply discover and receive routing information and cannot effectively identify routing-related malicious attacks, or can only prevent limited types of routing threats and anomalies. For example, OSPFv2 uses passwords and encrypted MD5 to improve routing security; Internet Protocol Security (IPSec) is used to ensure the confidentiality and integrity of communication; Secure-BGP is used to ensure the correctness of BGP confirmation; there are other technologies such as encryption, etc. . However, these technologies are limited in improving security performance...

AI Technical Summary

Problems solved by technology

For example, the former has the advantage that each selection of the next hop is approved by the source node; the disadvantage is that the trust value evaluated by the source node for non-adjacent nodes is not as reliable as the trust value evaluated for adjacent nodes

For the latter, its advantages and disadvantages are exactly the opposite of those of the multiplicative method

Images