{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,3]],"date-time":"2026-09-03T16:12:24Z","timestamp":1788451944399,"version":"build-2803163510"},"reference-count":130,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2010,1,1]],"date-time":"2010-01-01T00:00:00Z","timestamp":1262304000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. IEEE"],"published-print":{"date-parts":[[2010,1]]},"DOI":"10.1109\/jproc.2009.2034031","type":"journal-article","created":{"date-parts":[[2010,1,5]],"date-time":"2010-01-05T21:43:58Z","timestamp":1262727838000},"page":"100-122","source":"Crossref","is-referenced-by-count":239,"title":["A Survey of BGP Security Issues and Solutions"],"prefix":"10.1109","volume":"98","author":[{"given":"K.","family":"Butler","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"T.R.","family":"Farley","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"P.","family":"McDaniel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"J.","family":"Rexford","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4302"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4306"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/S0140-3664(97)00186-2"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.1996.586129"},{"key":"ref31","author":"touch","year":"2009","journal-title":"The TCP Authentication Option"},{"key":"ref30","article-title":"bgp security update: is the sky falling?","author":"green","year":"2002","journal-title":"Proc NANOG 36"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2411"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4301"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3682"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2000.896287"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2385"},{"key":"ref27","doi-asserted-by":"crossref","DOI":"10.1109\/DISCEX.2001.932219","article-title":"public-key infrastructure for the secure border gateway protocol (s-bgp)","author":"seo","year":"2001","journal-title":"Proc 2nd DARPA Inform Survivability Conf and Exposition"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/378444.378449"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/90.974523"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1321"},{"key":"ref21","author":"perlman","year":"1988","journal-title":"Network layer protocols with Byzantine robustness"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2104"},{"key":"ref23","year":"2002","journal-title":"Secure Hash Standard"},{"key":"ref101","article-title":"bgp security, availability, and operator needs","author":"meyer","year":"2003","journal-title":"Proc NANOG 36"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.jco.2004.01.002"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3221"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1976.1055638"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/90.974527"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2002.1019307"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/1036474.1036502"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/997150.997156"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4778"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3411"},{"key":"ref55","year":"2006","journal-title":"The APNIC Resource Certification Page"},{"key":"ref54","author":"lepinksi","year":"2009","journal-title":"A Profile for Route Origin Authorizations (ROAs)"},{"key":"ref53","author":"griffin","year":"2003","journal-title":"Personal communication"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/1198255.1198259"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4303"},{"key":"ref4","article-title":"routing snafu causes internet outage","author":"barrett","year":"1997","journal-title":"Interactive Week"},{"key":"ref3","author":"stewart","year":"1999","journal-title":"BGP4 Inter-Domain Routing in the Internet"},{"key":"ref6","year":"0","journal-title":"Con-Ed Steals the 'Net"},{"key":"ref5","article-title":"how prevalent is prefix hijacking on the internet?","author":"boothe","year":"2006","journal-title":"Proc NANOG 36"},{"key":"ref8","doi-asserted-by":"crossref","DOI":"10.1145\/1151659.1159947","article-title":"understanding the network-level behavior of spammers","author":"ramachandran","year":"2006","journal-title":"Proc ACM Sigcomm"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4012"},{"key":"ref7","year":"0","journal-title":"Pakistan hijacks YouTube"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1282427.1282411"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/997150.997152"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637233"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1786"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028815"},{"key":"ref42","author":"bates","year":"2008","journal-title":"CIDR Report for 30 January 08"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2764"},{"key":"ref44","author":"bellovin","year":"2001","journal-title":"Slowing Routing Table Growth by Filtering Based on Address Allocation Policies"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2270"},{"key":"ref127","author":"white","year":"2006","journal-title":"Deployment Considerations for Secure Origin BGP (soBGP)"},{"key":"ref126","article-title":"don't secure routing protocols, secure data delivery","author":"wendlandt","year":"2006","journal-title":"Proc ACM SIGCOMM Workshop on Hot Topics in Networks"},{"key":"ref125","author":"avramopoulos","year":"2007","journal-title":"How small groups can secure interdomain routing"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/1281100.1281123"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/49.839932"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/SP.1980.10006"},{"key":"ref129","article-title":"ten risks of pki: what you're not being told about public key infrastructure","volume":"16","author":"ellison","year":"2000","journal-title":"Computers & Security"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2005.11.007"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4760"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1016\/0012-365X(72)90001-5"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1007\/BF02254791"},{"key":"ref130","author":"lepinski","year":"2009","journal-title":"An Infrastructure to Support Secure Internet Routing"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/90.793005"},{"key":"ref74","article-title":"efficient security mechanisms for routing protocols","author":"hu","year":"2003","journal-title":"Proc IEEE ISOC Symp Network and Distributed Systems Security"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015488"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/1232919.1232923"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-46416-6_38"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2009.090105"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2005.1541720"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/49.839934"},{"key":"ref63","article-title":"secure border gateway protocol (s-bgp) real world performance and deployment issues","author":"kent","year":"2000","journal-title":"Proc IEEE ISOC Symp Network and Distributed Systems Security"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1016\/j.simpat.2003.10.003"},{"key":"ref65","article-title":"sbgpsecure bgp","author":"bellovin","year":"2003","journal-title":"NANOG 28"},{"key":"ref66","author":"ng","year":"2004","journal-title":"Extensions to BGP to support secure origin BGP (soBGP)"},{"key":"ref67","article-title":"securing the border gateway protocol: a status update","author":"kent","year":"2003","journal-title":"Proc 7th IFIP TC-6 TC-11 Conf Communications and Multimedia Security"},{"key":"ref68","first-page":"75","article-title":"working around bgp: an incremental approach to improving security and accuracy of interdomain routing","author":"goodell","year":"2003","journal-title":"Proc ISOC NDSS"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4271"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4346"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1930"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/2.841785"},{"key":"ref95","doi-asserted-by":"crossref","DOI":"10.1145\/964725.633027","article-title":"understanding bgp misconfiguration","author":"mahajan","year":"2002","journal-title":"Proc ACM SIGCOMM 2002"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1145\/1140277.1140334"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2008.06.012"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948130"},{"key":"ref93","author":"huston","year":"2009","journal-title":"Validation of Route Origination in BGP Using the Resource Certificate PKI and ROAs"},{"key":"ref106","doi-asserted-by":"crossref","first-page":"431","DOI":"10.1007\/3-540-48405-1_28","article-title":"a forward-secure digital signature scheme","volume":"lncs 1666","author":"bellare","year":"1999","journal-title":"Advances in CryptologyCRYPTO '99 Proc"},{"key":"ref92","article-title":"phas: a prefix hijack alert system","author":"lad","year":"2006","journal-title":"Proc 15th Usenix Security Symp"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-004-0314-9"},{"key":"ref91","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1007\/978-3-540-45248-5_2","article-title":"topology-based detection of anomalous bgp messages","author":"kruegel","year":"2003","journal-title":"Proc 7th Int Symp Recent Advances in Intrusion Detection (RAID)"},{"key":"ref104","doi-asserted-by":"crossref","first-page":"416","DOI":"10.1007\/3-540-39200-9_26","article-title":"aggregate and verifiably encrypted signatures from bilinear maps","volume":"lncs 2656","author":"boneh","year":"2003","journal-title":"Proc Eurocrypt 2003"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2003.1233708"},{"key":"ref103","author":"goodrich","year":"2001","journal-title":"Efficient and Secure Network Routing Algorithms"},{"key":"ref102","article-title":"efficient protocols for signing routing messages","author":"zhang","year":"1998","journal-title":"Proc ISOC NDSS"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/TRIDNT.2006.1649172"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2003.1208984"},{"key":"ref110","article-title":"towards realistic million-node internet simulations","author":"cowie","year":"2000","journal-title":"Proc 1999 Int Conf Parallel and Distributed Processing Techniques and Applications (PTPTA'99)"},{"key":"ref98","article-title":"listen and whisper: security mechanisms for bgp","author":"subramanian","year":"2004","journal-title":"Proc ACM\/USENIX Symp Networked Systems Design and Implementation (NSDI)"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/359340.359342"},{"key":"ref96","article-title":"accurate real-time identification of ip prefix hijacking","author":"hu","year":"2007","journal-title":"Proc IEEE Symp Security and Privacy"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298336"},{"key":"ref10","year":"2003","journal-title":"The National Strategy to Secure Cyberspace"},{"key":"ref11","year":"0"},{"key":"ref12","year":"0"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2003.822655"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4987"},{"key":"ref15","author":"bellovin","year":"2003","journal-title":"Using link cuts to attack Internet routing"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2004.1354494"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4264"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180442"},{"key":"ref117","doi-asserted-by":"crossref","DOI":"10.1109\/ICC.2003.1203939","article-title":"an efficient algorithm for malicious update detection &amp; recovery in distance vector protocols","author":"chakrabarti","year":"2003","journal-title":"IEEE Int Conf Communications"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2005.1541715"},{"key":"ref81","article-title":"evaluating the performance impact of pki on bgp security","author":"zhao","year":"2005","journal-title":"Proc 4th Ann PKI R&D Workshop"},{"key":"ref18","author":"perlman","year":"1999","journal-title":"Interconnections Bridges Routers Switches and Internetworking Protocols"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/165611.165615"},{"key":"ref119","article-title":"resilience characteristics of the internet backbone routing infrastructure","author":"labovitz","year":"2000","journal-title":"Proc 3rd Information Survivability Workshop"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2005.1541721"},{"key":"ref83","year":"0","journal-title":"University of Oregon Route Views Project"},{"key":"ref114","article-title":"sphere: a binding model and middleware for routing protocols","author":"stachtos","year":"2001","journal-title":"Proc 4th Conf Open Architecture and Network Programming (OPENARCH 2001)"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2791"},{"key":"ref116","author":"gorman","year":"2003","journal-title":"Least Effort Strategies for Cybersecurity"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102139"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2004.1276605"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/781027.781043"},{"key":"ref89","article-title":"detection of invalid routing announcement in the internet","author":"zhao","year":"2002","journal-title":"IEEE DSN 2002"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1145\/774763.774775"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863996"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402989"},{"key":"ref85","year":"1992","journal-title":"Intermediate System to Intermediate System Inter-Domain Routing Information Exchange Protocol"},{"key":"ref86","article-title":"on inter-domain routing security and pretty secure bgp (psbgp)","volume":"10","author":"van oorschot","year":"2007","journal-title":"ACM Trans Inf Syst Security (TISSEC)"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/505202.505207"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1997"}],"container-title":["Proceedings of the IEEE"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5\/5357573\/05357585.pdf?arnumber=5357585","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,11]],"date-time":"2021-10-11T01:00:17Z","timestamp":1633914017000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5357585\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,1]]},"references-count":130,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/jproc.2009.2034031","relation":{},"ISSN":["0018-9219","1558-2256"],"issn-type":[{"value":"0018-9219","type":"print"},{"value":"1558-2256","type":"electronic"}],"subject":[],"published":{"date-parts":[[2010,1]]}}}