Foreword |
|
xi | |
Preface |
|
xv | |
|
|
1 | (58) |
|
|
3 | (14) |
|
|
3 | (5) |
|
1.2 Goals of a Secure Internet Architecture |
|
|
8 | (5) |
|
1.3 Future Internet Architectures |
|
|
13 | (4) |
|
|
17 | (26) |
|
|
21 | (4) |
|
|
25 | (2) |
|
|
27 | (4) |
|
|
31 | (3) |
|
2.5 Incentives for Stakeholders |
|
|
34 | (2) |
|
|
36 | (3) |
|
|
39 | (1) |
|
|
39 | (4) |
|
3 Isolation Domains (ISDs) |
|
|
43 | (16) |
|
|
43 | (4) |
|
|
47 | (1) |
|
3.3 Coordination Among ISDs |
|
|
48 | (1) |
|
|
48 | (3) |
|
3.5 ISD Governance Models |
|
|
51 | (5) |
|
3.6 Nested Isolation Domains |
|
|
56 | (3) |
|
|
59 | (182) |
|
4 Authentication Infrastructure |
|
|
61 | (32) |
|
|
61 | (7) |
|
4.2 Control-Plane Authentication |
|
|
68 | (15) |
|
|
83 | (3) |
|
4.4 End-Entity Authentication |
|
|
86 | (7) |
|
|
93 | (8) |
|
5.1 Motivation and Objectives |
|
|
94 | (3) |
|
5.2 Announcing and Discovering New ISDs |
|
|
97 | (3) |
|
5.3 Local Resolution of Conflicts |
|
|
100 | (1) |
|
|
101 | (18) |
|
|
102 | (2) |
|
6.2 Name Resolution Architecture |
|
|
104 | (2) |
|
6.3 Naming Information Model |
|
|
106 | (8) |
|
|
114 | (2) |
|
6.5 The Naming Consistency Observer (NCO) |
|
|
116 | (3) |
|
|
119 | (42) |
|
7.1 Path Exploration and Registration |
|
|
119 | (13) |
|
|
132 | (6) |
|
7.3 Secure Path Revocation |
|
|
138 | (8) |
|
7.4 Failure Resilience and Service Discovery |
|
|
146 | (7) |
|
7.5 AS-Level Anycast Service |
|
|
153 | (2) |
|
7.6 SCION Control Message Protocol (SCMP) |
|
|
155 | (4) |
|
|
159 | (2) |
|
|
161 | (18) |
|
|
162 | (2) |
|
8.2 Creation of Forwarding Paths |
|
|
164 | (10) |
|
8.3 Efficient Path Construction |
|
|
174 | (5) |
|
|
179 | (12) |
|
|
179 | (4) |
|
|
183 | (2) |
|
9.3 Transmission Control Protocol (TCP/SCION) |
|
|
185 | (3) |
|
9.4 SCION Stream Protocol (SSP) |
|
|
188 | (3) |
|
10 Deployment and Operation |
|
|
191 | (50) |
|
|
191 | (8) |
|
10.2 End-Domain Deployment |
|
|
199 | (2) |
|
10.3 The SCION-IP Gateway (SIG) |
|
|
201 | (10) |
|
10.4 How to Try Out SCION |
|
|
211 | (4) |
|
10.5 SCION AS Management Framework |
|
|
215 | (3) |
|
|
218 | (2) |
|
10.7 The SCIONLab Experimentation Environment |
|
|
220 | (3) |
|
10.8 Example: Life of a SCION Data Packet |
|
|
223 | (7) |
|
|
230 | (11) |
|
|
241 | (58) |
|
|
243 | (36) |
|
11.1 Motivation and Introduction |
|
|
244 | (1) |
|
11.2 Goals and Adversary Model |
|
|
245 | (2) |
|
|
247 | (3) |
|
|
250 | (9) |
|
|
259 | (2) |
|
11.6 SIBRA Ephemeral Paths |
|
|
261 | (7) |
|
11.7 Priority Traffic Monitoring and Policing |
|
|
268 | (4) |
|
|
272 | (1) |
|
|
273 | (3) |
|
|
276 | (3) |
|
|
279 | (20) |
|
|
280 | (1) |
|
12.2 OPT Problem Definition |
|
|
281 | (2) |
|
|
283 | (3) |
|
12.4 OPT Protocol Description |
|
|
286 | (5) |
|
12.5 Dynamically Recreatable Keys (DRKey) |
|
|
291 | (8) |
|
IV Analysis and Evaluation |
|
|
299 | (40) |
|
|
301 | (30) |
|
|
302 | (2) |
|
|
304 | (1) |
|
|
305 | (2) |
|
13.4 Control-Plane Path Manipulation |
|
|
307 | (5) |
|
13.5 Data-Plane Path Manipulation |
|
|
312 | (6) |
|
13.6 Censorship and Surveillance |
|
|
318 | (2) |
|
13.7 Attacks Against Availability |
|
|
320 | (5) |
|
13.8 Absence of Kill Switches |
|
|
325 | (2) |
|
13.9 Resilience to Path Hijacking |
|
|
327 | (3) |
|
|
330 | (1) |
|
|
331 | (8) |
|
14.1 Modeling Power Consumption of an FIA Router |
|
|
332 | (2) |
|
|
334 | (5) |
|
|
339 | (48) |
|
15 Packet and Message Formats |
|
|
341 | (28) |
|
|
341 | (14) |
|
|
355 | (1) |
|
15.3 PCB and Path Segment |
|
|
356 | (5) |
|
15.4 Path Management Messages |
|
|
361 | (1) |
|
|
362 | (1) |
|
|
363 | (6) |
|
16 Configuration File Formats |
|
|
369 | (12) |
|
16.1 Trust Root Configuration |
|
|
369 | (1) |
|
|
370 | (4) |
|
16.3 Discovery Service Configuration |
|
|
374 | (2) |
|
16.4 Router, Server, and End-Host Configuration |
|
|
376 | (5) |
|
17 Cryptographic Algorithms |
|
|
381 | (6) |
|
|
381 | (3) |
|
17.2 Symmetric Primitives |
|
|
384 | (1) |
|
17.3 Asymmetric Primitives |
|
|
385 | (1) |
|
17.4 Post-Quantum Cryptography |
|
|
386 | (1) |
Bibliography |
|
387 | (22) |
Frequently Asked Questions |
|
409 | (8) |
Glossary |
|
417 | (4) |
Abbreviations |
|
421 | (2) |
Index |
|
423 | |