Security, Anonymity, Privacy, and Trust

Abstract

In order to guarantee secure operation of Network 2030s inter-domain infrastructure, we pursue a systematic design approach in this chapter. This systematic approach starts with concretizing the security properties that the network infrastructure should fulfill. In particular, we identify improved trust, path control, source authentication, and availability guarantees as the most important such properties. After laying out these goals, we articulate the constraints under which the properties must be achieved, e.g., the pervasiveness of (D)DoS attacks and the resulting need for lightweight security systems. Against the background of these goals and requirements, we propose a suite of security systems that comprehensively address current and future network-security challenges. More precisely, we present a path-aware network architecture that can be enhanced with a source-authentication mechanism, a bandwidth-reservation system, and a privacy-increasing forwarding scheme. Finally, we focus on practical considerations and expound the new services needed to implement our system proposals.