Abstract: To mitigate the threaten posed by route hijackings to the Internet, various secure inter-domain routing mechanisms have been proposed to prevent hijackings or limit their propagations. This paper introduces the basic concept of routing hijackings, presents a taxonomy of them, and makes a through analysis and comparison on these mechanisms. With Internet scale route simulation, their defense capabilities against the most common routing hijackings are inferred under different deployment scenarios.

Key words: routing protocol, route hijacking, secure inter-domain routing, route simulation, Autonomous System.

摘要： 为了降低路由劫持对互联网可能产生的威胁，学术界在近十几年来提出了形形色色的域间安全路由机制以阻止或限制路由劫持事件的产生和传播。本文介绍路由劫持的基本概念和常见种类，对几种重要的域间安全路由机制的原理进行分析和比较，总结其针对的常见劫持类型，通过路由仿真分析不同安全机制在不同部署时期对路由劫持的具体防御能力。

关键词: 路由协议, 路由劫持, 域间安全路由机制, 路由仿真, 自治系统