Foreword by Joël Mesot xi
Foreword by Fritz Steinmann xiii
Preface xv
How to Read This Book xvii
Acknowledgments xix
1 Introduction 1
1.1 Today's Internet . . . . . . . . . . . . . . . . . . . . . . . 2
1.2 Goals for a Secure Internet Architecture . . . . . . . . . . . 9
I SCION Core Components 15
2 Overview 17
2.1 Infrastructure Components . . . . . . . . . . . . . . . . . . 20
2.2 Authentication . . . . . . . . . . . . . . . . . . . . . . . . 21
2.3 Control Plane . . . . . . . . . . . . . . . . . . . . . . . . . 23
2.4 Data Plane . . . . . . . . . . . . . . . . . . . . . . . . . . 28
2.5 ISD and AS Numbering . . . . . . . . . . . . . . . . . . . 31
3 Authentication 35
3.1 The Control-Plane PKI (CP-PKI) . . . . . . . . . . . . . . 36
3.2 DRKey: Dynamically Recreatable Keys . . . . . . . . . . . 52
3.3 SCION Packet Authenticator Option . . . . . . . . . . . . . 61
4 Control Plane 65
4.1 Path-Segment Construction Beacons (PCBs) . . . . . . . . 66
4.2 Path Exploration (Beaconing) . . . . . . . . . . . . . . . . 69
4.3 Path-Segment Registration . . . . . . . . . . . . . . . . . . 71
4.4 PCB and Path-Segment Selection . . . . . . . . . . . . . . 73
4.5 Path Lookup . . . . . . . . . . . . . . . . . . . . . . . . . 80
4.6 Service Discovery . . . . . . . . . . . . . . . . . . . . . . 87
4.7 SCION Control Message Protocol (SCMP) . . . . . . . . . 89
5 Data Plane 93
5.1 Inter- and Intra-domain Forwarding . . . . . . . . . . . . . 94
5.2 Packet Format . . . . . . . . . . . . . . . . . . . . . . . . 95
5.3 Path Authorization . . . . . . . . . . . . . . . . . . . . . . 96
5.4 The SCION Path Type . . . . . . . . . . . . . . . . . . . . 101
5.5 Path Construction (Segment Combinations) . . . . . . . . . 104
5.6 Packet Initialization and Forwarding . . . . . . . . . . . . . 115
5.7 Path Revocation . . . . . . . . . . . . . . . . . . . . . . . 120
5.8 Data-Plane Extensions . . . . . . . . . . . . . . . . . . . . 124
II Analysis of the Core Components 127
6 Functional Properties and Scalability 129
6.1 Dependency Analysis . . . . . . . . . . . . . . . . . . . . . 130
6.2 SCION Path Policy . . . . . . . . . . . . . . . . . . . . . . 135
6.3 Scalability Analysis . . . . . . . . . . . . . . . . . . . . . 148
6.4 Beaconing Overhead and Path Quality . . . . . . . . . . . . 150
7 Security Analysis 157
7.1 Security Goals and Properties . . . . . . . . . . . . . . . . 158
7.2 Threat Model . . . . . . . . . . . . . . . . . . . . . . . . . 161
7.3 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 162
7.4 Control-Plane Security . . . . . . . . . . . . . . . . . . . . 165
7.5 Path Authorization . . . . . . . . . . . . . . . . . . . . . . 170
7.6 Data-Plane Security . . . . . . . . . . . . . . . . . . . . . 172
7.7 Source Authentication . . . . . . . . . . . . . . . . . . . . 174
7.8 Absence of Kill Switches . . . . . . . . . . . . . . . . . . . 176
7.9 Other Security Properties . . . . . . . . . . . . . . . . . . . 179
7.10 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
III Achieving Global Availability Guarantees 183
8 Extensions for the Control Plane 185
8.1 Hidden Paths . . . . . . . . . . . . . . . . . . . . . . . . . 185
8.2 Time Synchronization . . . . . . . . . . . . . . . . . . . . 190
8.3 Path Metadata in PCBs . . . . . . . . . . . . . . . . . . . . 197
9 Monitoring and Filtering 203
9.1 Replay Suppression . . . . . . . . . . . . . . . . . . . . . . 204
9.2 High-Speed Traffic Filtering with LightningFilter . . . . . . 207
9.
Laurent Chuat is a postdoctoral researcher in the Network Security Group at ETH Zurich, where most of his research focuses on authentication and public-key infrastructures. He obtained his PhD in computer science from ETH Zurich in 2020 and co-authored the book "SCION: A Secure Internet Architecture."
Markus Legner is a senior researcher and lecturer in the Network Security Group, where he is conducting research on the design and verification of security protocols. He holds a Bachelor's degree in computer science from ETH Zurich as well as a doctorate in theoretical physics.
David Basin is a professor of computer science at ETH Zurich and was head of the department from 2019 to 2020. David received his PhD in computer science from Cornell University in 1989 and his Habilitation in computer science from the University of Saarbrücken in 1996. From 1997 to 2002, he held the Chair of Software Engineering at the University of Freiburg in Germany. He is the founding director of the Zurich Information Security Center (ZISC).
David Hausheer is a professor at the Faculty of Computer Science at Otto von Guericke University Magdeburg, where he leads the Networks and Distributed Systems Lab. He received his degree in electrical engineering from ETH Zurich in 2001. Since 2001, he participated in numerous European Union projects. He obtained his PhD in 2005 and was then employed as a senior researcher and lecturer in the Department of Informatics (IFI) at the University of Zurich.
Samuel Hitz holds a Master's degree in computer science from ETH Zurich and is the current CTO and previous CEO of Anapaya, which he co-founded with Adrian Perrig, David Basin, and Peter Müller. He has worked on the implementation of SCION and, together with Anapaya's customers, on the real-world deployment and operation of an enterprise-oriented SCION network.
Peter Müller has been a professor of computer science at ETH Zurich since 2008. Before joining ETH Zurich, he worked as an IT project manager at Deutsche Bank in Frankfurt and held a position as researcher at Microsoft Research. Peter Müller is working on programming languages, methods, and tools with the goal of enabling programmers to develop correct software.
Adrian Perrig is a professor at the Department of Computer Science at ETH Zurich, where he leads the Network Security Group. He is also an adjunct professor of electrical and computer engineering at Carnegie Mellon University. From 2007 to 2012, he served as the technical director for Carnegie Mellon's CyLab. During that time, he led a research project aimed at building a next-generation Internet architecture, which was later renamed SCION.
