Information assurance in the SQoS network

In the SQoS network as introduced in [1] and [2], the border router in every autonomous system (AS) provides customized security mechanisms to the incoming packets. Some serious problems have been recently raised particularly when there are one or more compromised routers that attempt to modify, delete, or fabricate any part or the whole packet into the SQoS network. The compromised router can either passively or actively perform the malicious activities against the forwarding packets. The SQoS network does not explicitly specify the method to detect whether the data contained in the packets have been tampered by the compromised routers or by the end host itself. We deliberate the threats and propose several methods to detect both the malicious routers and end hosts such that SQoS information and payload are authentic and integrity-protected.