Towards securing internet eXchange points against curious onlooKers

Marco Chiesa; Daniel Demmler; Marco Canini; Michael Schapira; Thomas Schneider

doi:10.1145/2959424.2959427

Towards securing internet eXchange points against curious onlooKers

Marco Chiesa, Daniel Demmler, Marco Canini, Michael Schapira, Thomas Schneider

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

9 Scopus citations

Abstract

The growing relevance of Internet eXchange Points (IXPs), where an increasing number of networks exchange routing in-formation, poses fundamental questions regarding the privacy guarantees of confidential business information. To facilitate the exchange of routes among their members, IXPs provide Route Server (RS) services to dispatch the routes according to each member's export policies. Nowadays, to make use of RSes, these policies must be disclosed to the IXP. This state of affairs raises privacy concerns among network admin-istrators and even deters some networks from subscribing to RS services. We design sixpack (which stands for "Secur-ing Internet eXchange Points Against Curious onlooKers"), a RS service that leverages Secure Multi-Party Computa-tion (SMPC) techniques to keep export policies confidential, while maintaining the same functionalities as today's RSes. We assess the effectiveness and scalability of our system by evaluating our prototype implementation and using traces of data from one of the largest IXPs in the world.

Original language	English (US)
Title of host publication	ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop
Publisher	Association for Computing Machinery, Inc
Pages	32-34
Number of pages	3
ISBN (Electronic)	9781450344432
DOIs	https://doi.org/10.1145/2959424.2959427
State	Published - Jul 16 2016
Event	ACM, IRTF and ISOC Applied Networking Research Workshop, ANRW 2016 - Berlin, Germany Duration: Jul 16 2016 → …

Publication series

Name	ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop

Other

Other	ACM, IRTF and ISOC Applied Networking Research Workshop, ANRW 2016
Country/Territory	Germany
City	Berlin
Period	07/16/16 → …

Bibliographical note

Publisher Copyright:
© 2016 Copyright held by the owner/author(s).

Keywords

Internet Exchange Points
Privacy
Routing
Secure Multiparty

ASJC Scopus subject areas

General Computer Science

Access to Document

10.1145/2959424.2959427

Cite this

Chiesa, M., Demmler, D., Canini, M., Schapira, M., & Schneider, T. (2016). Towards securing internet eXchange points against curious onlooKers. In ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop (pp. 32-34). (ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop). Association for Computing Machinery, Inc. https://doi.org/10.1145/2959424.2959427

@inproceedings{f941afaffd1e4c8083725e470c44c71e,

title = "Towards securing internet eXchange points against curious onlooKers",

abstract = "The growing relevance of Internet eXchange Points (IXPs), where an increasing number of networks exchange routing in-formation, poses fundamental questions regarding the privacy guarantees of confidential business information. To facilitate the exchange of routes among their members, IXPs provide Route Server (RS) services to dispatch the routes according to each member's export policies. Nowadays, to make use of RSes, these policies must be disclosed to the IXP. This state of affairs raises privacy concerns among network admin-istrators and even deters some networks from subscribing to RS services. We design sixpack (which stands for {"}Secur-ing Internet eXchange Points Against Curious onlooKers{"}), a RS service that leverages Secure Multi-Party Computa-tion (SMPC) techniques to keep export policies confidential, while maintaining the same functionalities as today's RSes. We assess the effectiveness and scalability of our system by evaluating our prototype implementation and using traces of data from one of the largest IXPs in the world.",

keywords = "Internet Exchange Points, Privacy, Routing, Secure Multiparty",

author = "Marco Chiesa and Daniel Demmler and Marco Canini and Michael Schapira and Thomas Schneider",

note = "Publisher Copyright: {\textcopyright} 2016 Copyright held by the owner/author(s).; ACM, IRTF and ISOC Applied Networking Research Workshop, ANRW 2016 ; Conference date: 16-07-2016",

year = "2016",

month = jul,

day = "16",

doi = "10.1145/2959424.2959427",

language = "English (US)",

series = "ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop",

publisher = "Association for Computing Machinery, Inc",

pages = "32--34",

booktitle = "ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop",

}

Chiesa, M, Demmler, D, Canini, M, Schapira, M & Schneider, T 2016, Towards securing internet eXchange points against curious onlooKers. in ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop. ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop, Association for Computing Machinery, Inc, pp. 32-34, ACM, IRTF and ISOC Applied Networking Research Workshop, ANRW 2016, Berlin, Germany, 07/16/16. https://doi.org/10.1145/2959424.2959427

Towards securing internet eXchange points against curious onlooKers. / Chiesa, Marco; Demmler, Daniel; Canini, Marco et al.
ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop. Association for Computing Machinery, Inc, 2016. p. 32-34 (ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Towards securing internet eXchange points against curious onlooKers

AU - Chiesa, Marco

AU - Demmler, Daniel

AU - Canini, Marco

AU - Schapira, Michael

AU - Schneider, Thomas

PY - 2016/7/16

Y1 - 2016/7/16

N2 - The growing relevance of Internet eXchange Points (IXPs), where an increasing number of networks exchange routing in-formation, poses fundamental questions regarding the privacy guarantees of confidential business information. To facilitate the exchange of routes among their members, IXPs provide Route Server (RS) services to dispatch the routes according to each member's export policies. Nowadays, to make use of RSes, these policies must be disclosed to the IXP. This state of affairs raises privacy concerns among network admin-istrators and even deters some networks from subscribing to RS services. We design sixpack (which stands for "Secur-ing Internet eXchange Points Against Curious onlooKers"), a RS service that leverages Secure Multi-Party Computa-tion (SMPC) techniques to keep export policies confidential, while maintaining the same functionalities as today's RSes. We assess the effectiveness and scalability of our system by evaluating our prototype implementation and using traces of data from one of the largest IXPs in the world.

AB - The growing relevance of Internet eXchange Points (IXPs), where an increasing number of networks exchange routing in-formation, poses fundamental questions regarding the privacy guarantees of confidential business information. To facilitate the exchange of routes among their members, IXPs provide Route Server (RS) services to dispatch the routes according to each member's export policies. Nowadays, to make use of RSes, these policies must be disclosed to the IXP. This state of affairs raises privacy concerns among network admin-istrators and even deters some networks from subscribing to RS services. We design sixpack (which stands for "Secur-ing Internet eXchange Points Against Curious onlooKers"), a RS service that leverages Secure Multi-Party Computa-tion (SMPC) techniques to keep export policies confidential, while maintaining the same functionalities as today's RSes. We assess the effectiveness and scalability of our system by evaluating our prototype implementation and using traces of data from one of the largest IXPs in the world.

KW - Internet Exchange Points

KW - Privacy

KW - Routing

KW - Secure Multiparty

UR - http://www.scopus.com/inward/record.url?scp=84983247077&partnerID=8YFLogxK

U2 - 10.1145/2959424.2959427

DO - 10.1145/2959424.2959427

M3 - Conference contribution

AN - SCOPUS:84983247077

T3 - ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop

SP - 32

EP - 34

BT - ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop

PB - Association for Computing Machinery, Inc

T2 - ACM, IRTF and ISOC Applied Networking Research Workshop, ANRW 2016

Y2 - 16 July 2016

ER -

Chiesa M, Demmler D, Canini M, Schapira M, Schneider T. Towards securing internet eXchange points against curious onlooKers. In ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop. Association for Computing Machinery, Inc. 2016. p. 32-34. (ANRW 2016 - Proceedings of the ACM, IRTF and ISOC Applied Networking Research Workshop). doi: 10.1145/2959424.2959427

Towards securing internet eXchange points against curious onlooKers

Abstract

Publication series

Other

Bibliographical note

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this