计算机工程2026,Vol.52Issue(6):17-30,14.DOI:10.19678/j.issn.1000-3428.0252551
资源公钥基础设施部署问题研究综述
Review on Deployment Problems of Resource Public Key Infrastructure
摘要
Abstract
Resource Public Key Infrastructure(RPKI)is an important mechanism for safeguarding Border Gateway Protocol(BGP)routing security,which verifies the legitimacy of BGP announcements through Route Origin Authorization(ROA)and Route Origin Validation(ROV).As RPKI continues to advance globally,its deployment status and defense effects have become prominent research hotspots.In recent years,researchers have extensively studied ROA configuration problems and ROV deployment measurements extensively,demonstrating the operational status and protection capability of RPKI in real networks from different dimensions.Current surveys mainly focus on theoretical research on RPKI systems,emphasizing architectural vulnerabilities without systematically organizing or summarizing the key challenges and related studies encountered in their actual deployment.This review systematically summarizes recent studies on the deployment issues of RPKI systems.First,it focuses on classifying common error types in ROA configurations,including benign ROA conflicts and loose ROA registrations,and analyses their causes and impacts on routing security systematically.Then,it comprehensively summarizes and compares existing ROV deployment measurement methods and reviews evaluation methods for assessing ROV validation effectiveness and its impact on path propagation.Finally,the review outlines future research directions to address RPKI deployment issues,providing a theoretical foundation and methodological reference for subsequent research on RPKI deployment optimization,security assessment,and strategy research.The findings can promote the widespread adoption of RPKI and enhance the defense against BGP prefix hijacking.关键词
路由安全/边界网关协议/前缀劫持/资源公钥基础设施/路由源授权/路由源验证Key words
route security/Border Gateway Protocol(BGP)/prefix hijacking/Resource Public Key Infrastructure(RPKI)/Route Origin Authorization(ROA)/Route Origin Validation(ROV)分类
信息技术与安全科学引用本文复制引用
杨国正,齐冬震,陈攀,沈照斌,尹鹏语,霍彦霖..资源公钥基础设施部署问题研究综述[J].计算机工程,2026,52(6):17-30,14.基金项目
国家自然科学基金面上项目(62271496). (62271496)