TY - GEN
T1 - Towards securing internet eXchange points against curious onlooKers
AU - Chiesa, Marco
AU - Demmler, Daniel
AU - Canini, Marco
AU - Schapira, Michael
AU - Schneider, Thomas
N1 - Publisher Copyright: © 2016 Copyright held by the owner/author(s).
PY - 2016/7/16
Y1 - 2016/7/16
N2 - The growing relevance of Internet eXchange Points (IXPs), where an increasing number of networks exchange routing in-formation, poses fundamental questions regarding the privacy guarantees of confidential business information. To facilitate the exchange of routes among their members, IXPs provide Route Server (RS) services to dispatch the routes according to each member's export policies. Nowadays, to make use of RSes, these policies must be disclosed to the IXP. This state of affairs raises privacy concerns among network admin-istrators and even deters some networks from subscribing to RS services. We design sixpack (which stands for "Secur-ing Internet eXchange Points Against Curious onlooKers"), a RS service that leverages Secure Multi-Party Computa-tion (SMPC) techniques to keep export policies confidential, while maintaining the same functionalities as today's RSes. We assess the effectiveness and scalability of our system by evaluating our prototype implementation and using traces of data from one of the largest IXPs in the world.
AB - The growing relevance of Internet eXchange Points (IXPs), where an increasing number of networks exchange routing in-formation, poses fundamental questions regarding the privacy guarantees of confidential business information. To facilitate the exchange of routes among their members, IXPs provide Route Server (RS) services to dispatch the routes according to each member's export policies. Nowadays, to make use of RSes, these policies must be disclosed to the IXP. This state of affairs raises privacy concerns among network admin-istrators and even deters some networks from subscribing to RS services. We design sixpack (which stands for "Secur-ing Internet eXchange Points Against Curious onlooKers"), a RS service that leverages Secure Multi-Party Computa-tion (SMPC) techniques to keep export policies confidential, while maintaining the same functionalities as today's RSes. We assess the effectiveness and scalability of our system by evaluating our prototype implementation and using traces of data from one of the largest IXPs in the world.
KW - Internet Exchange Points
KW - Privacy
KW - Routing
KW - Secure Multiparty
UR - https://www.scopus.com/pages/publications/84983247077
U2 - 10.1145/2959424.2959427
DO - 10.1145/2959424.2959427
M3 - Conference contribution
T3 - ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop
SP - 32
EP - 34
BT - ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop
T2 - ACM, IRTF and ISOC Applied Networking Research Workshop, ANRW 2016
Y2 - 16 July 2016
ER -