[Secdispatch] Secure routing email list presentation

[Meiling Chen <[e-mail]>]

Hi all,
I'm sorry I missed the time of the presentation. Please allow me to show it through the mailing list.

1.What does secure routing do?
Provide security services for user link transmission.

2.Why secure routing is required?
To network operators: 
provide users with differentiated security capabilities/services.
Network defense, reduce malicious users' attacks on the network.
To users: 
select the network path according to the business security requirements.

3.Why can't the existing technology do Secure Routing?
The management and use of existing security devices are separated from the IP network；
Network routing strategy is independent of security;

4.What security capabilities are provided?
Anti-DDoS
IPS
IDS
...

According to the IPDRR model to classify the capabilities of existing security products into 23 security capability categories.
https://datatracker.ietf.org/doc/draft-chen-atomized-security-functions/

5.What to do for Secure Routing
Get the node's security capability information
Form routing path according to user security requirements
Issue the routing path, which is implemented through routing programming

6.How to get node’s security capabilities?
Extended BGP-LS(RFC7752) protocol to carry the security capabilities of the node by Type Node, Link, Prefix. 

7.To provide external security services, we need a complete set of processes, 
step 1: collect the nodes security capabilities
step 2: initial configuration on security devices
step 3: distribute routing path
Then when an attack occurs, security defense can be triggered

8. What to do next?
Secure routing is a implementation of built in security which is our most important direction.
For this topic has no suitable WG in the Security Area, Whether a new working group can be formed? What should we do? This topic needs more discussion.
 
Your suggestions are very important, Please feel free to comment. 

Best,
Meiling