This book describes the essential components of the SCION secure Internet architecture, the first architecture designed foremost for strong security and high availability. Among its core features, SCION also provides route control, explicit trust information, multipath communication, scalable quality-of-service guarantees, and efficient forwarding. The book includes functional specifications of the network elements, communication protocols among these elements, data structures, and configuration files. In particular, the book offers a specification of a working prototype.
The authors provide a comprehensive description of the main design features for achieving a secure Internet architecture. They facilitate the reader throughout, structuring the book so that the technical detail gradually increases, and supporting the text with a glossary, an index, a list of abbreviations, answers to frequently asked questions, and special highlighting for examples and for sections that explain important research, engineering, and deployment features. The book is suitable for researchers, practitioners, and graduate students who are interested in network security.
Prof. Dr. Adrian Perrig is the director of the Network Security Group at ETH Zurich, where Laurent Chuat is a Ph.D. student. Dr. Pawel Szalachowski is an assistant professor at the Singapore University of Technology and Design, he was previously a member of the ETHZ Network Security Group. Dr. Raphael M. Reischuk works at Zuhlke Engineering AG, he was previously a member of the ETHZ Network Security Group.
Part I: SCION Overview.- Introduction.- Isolation Domains.- Part II: SCION Details.- Network Control Plane.- Network Data Plane.- Authentication.- ISD Coordination.- Name Resolution.- Part III: Analysis and Evaluation.- Security Analysis.- Modeling Energy Consumption of a SCION-Enabled Network.- Part IV: Deployment and Operation.- Deployment.- Operation.- Part V: Low-Level Details.- Packet Formats.- Configuration File Formats.- Cryptographic Algorithms.- Border Router.