IVeri：隐私保护域间验证
IVeri: Privacy-Preserving Interdomain Verification
摘要：
在域间网络中，自治系统（AS）经常建立对等协议，这样一个AS（协议消费者）可以影响另一个AS（协议提供者）的路由策略。对等协议在协议提供商的BGP配置中实现。核查其执行情况至关重要，因为一个错误就可能导致灾难性后果。然而，对等协议验证的根本挑战是如何保护协议中涉及的两个AS的隐私。为此，本文介绍了IVeri，第一个隐私保护域间协议验证系统。IVeri将域间协议验证问题建模为SAT公式，并开发了一种新颖，高效，隐私服务的SAT求解器，该求解器使用不经意的洗牌和乱码电路作为关键构建块，让协议消费者和提供者协作验证域间对等协议的实施，而不会暴露他们的私人信息。IVeri的原型实现和广泛的评估。结果表明，IVeri实现了准确的，隐私保护的域间协议验证与合理的开销。
英文摘要：
In an interdomain network, autonomous systems (ASes) often establish peering agreements, so that one AS (agreement consumer) can influence the routing policies of the other AS (agreement provider). Peering agreements are implemented in the BGP configuration of the agreement provider. It is crucial to verify their implementation because one error can lead to disastrous consequences. However, the fundamental challenge for peering agreement verification is how to preserve the privacy of both ASes involved in the agreement. To this end, this paper presents IVeri, the first privacy-preserving interdomain agreement verification system. IVeri models the interdomain agreement verification problem as a SAT formula, and develops a novel, efficient, privacy-serving SAT solver, which uses oblivious shuffling and garbled circuits as the key building blocks to let the agreement consumer and provider collaboratively verify the implementation of interdomain peering agreements without exposing their private information. A prototype of IVeri is implemented and evaluated extensively. Results show that IVeri achieves accurate, privacy-preserving interdomain agreement verification with reasonable overhead.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
