[论文解读] The geopolitics behind the routes data travels: a case study of Iran

Loqman Salamatian, Frédérick Douzet+2 more|arXiv (Cornell University)|Nov 18, 2019

Opportunistic and Delay-Tolerant Networks参考文献 27被引用 4

一句话总结

本文分析了伊朗的边界网关协议（BGP）路由策略，揭示地缘政治目标如何塑造数据传输路径。通过BGP数据与网络分析，识别出三种战略用途：构建自给自足的国家互联网、通过伊朗内联网实现集中式审查，以及利用连通性扩大区域影响力，展示了网络架构如何反映网络空间中的国家级战略目标。

ABSTRACT

The global expansion of the Internet has brought many challenges to geopolitics. Cyberspace is a space of strategic priority for many states. Understanding and representing its geography remains an ongoing challenge. Nevertheless, we need to comprehend Cyberspace as a space organized by humans to analyse the strategies of the actors. This geography requires a multidisciplinary dialogue associating geopolitics, computer science and mathematics. Cyberspace is represented as three superposed and interacting layers: the physical, logical, and informational layers. This paper focuses on the logical layer through an analysis of the structure of connectivity and the Border Gateway Protocol (BGP). This protocol determines the routes taken by the data. It has been leveraged by countries to control the flow of information, and to block the access to contents (going up to full disruption of the internet) or for active strategic purposes such as hijacking traffic or attacking infrastructures. Several countries have opted for a BGP strategy. The goal of this study is to characterize these strategies, to link them to current architectures and to understand their resilience in times of crisis. Our hypothesis is that there are connections between the network architecture shaped through BGP, and strategy of stakeholders at a national level. We chose to focus on the case of Iran because, Iran presents an interesting BGP architecture and holds a central position in the connectivity of the Middle East. Moreover, Iran is at the center of several ongoing geopolitical rifts. Our observations make it possible to infer three ways in which Iran could have used BGP to achieve its strategic goals: the pursuit of a self-sustaining national Internet with controlled borders; the will to set up an Iranian Intranet to facilitate censorship; and the leverage of connectivity as a tool of regional influence.

研究动机与目标

• 理解国家级战略目标如何被编码进BGP路由架构中。
• 研究伊朗的网络基础设施如何反映其在中东地区的地缘政治抱负。
• 分析BGP在实现国家对数据流控制（包括审查与流量操控）中的作用。
• 评估伊朗互联网架构在地缘政治压力下的韧性与战略设计。

提出的方法

• 收集并分析来自伊朗及周边地区的BGP路由数据。
• 绘制AS间（自治系统）连接图，以识别路由模式与控制节点。
• 识别BGP劫持事件与路由操纵，以推断战略意图。
• 运用网络拓扑分析评估伊朗互联网连接的结构与韧性。
• 将路由行为与已知的地缘政治事件及国家政策交叉比对。
• 应用三层次模型（物理层、逻辑层、信息层）来构建网络空间作为地缘政治建构的分析框架。

实验结果

研究问题

• RQ1 伊朗的BGP路由架构在多大程度上反映了其在网络空间中的战略目标？
• RQ2 伊朗在何种方式下利用BGP控制或操纵数据流以实现国家安全或审查目的？
• RQ3 伊朗互联网基础设施在多大程度上被设计为在地缘政治危机期间实现自主与韧性？
• RQ4 伊朗如何利用其在区域连通性中的地位对邻国施加影响？
• RQ5 是否存在与国家政策相关的基于BGP的流量操纵或劫持事件的证据？

主要发现

• 伊朗已发展出一种BGP路由架构，可实现一种受控外部连接的自给自足国家互联网。
• 该国实施了与国家内联网建设一致的路由策略，促进内容的集中过滤与审查。
• 伊朗参与了BGP劫持事件，表明其对数据路径的主动操纵具有战略或破坏性目的。
• 伊朗的网络结构显示出有意减少对西方传输提供商的依赖，从而增强战略自主性。
• 该国的连通性模式表明其聚焦于区域主导地位，将互联网基础设施作为在中东施加影响力的工具。
• 分析表明，伊朗的BGP行为反映出一种协调一致的战略，结合了技术控制、韧性建设与地缘政治影响力。