Multilevel security for IP routing

This paper presents a multilevel security (MLS) scheme for routing information. Based on an unprotected IP network, MLS routers may establish logical networks that fulfill different sets of security requirements. We describe a routing scheme for separation of routing information into different security classes derived from multiple levels of integrity, confidentiality and availability. The scheme may be useful in coalition networks where partners may benefit from joint resources and at the same time control the security of routes involving its own routers. On the other hand, from a coalition point of view, partner-specific classifications of links and routes may affect the network connectivity. The paper also analyzes this impact.