SBAS: A Secure Underlay for the Internet

Modern secure Internet routing solutions, like Border Gateway Protocol-Security (BGPsec) and Scalability, Control and Isolation On Next-generation networks (SCION), remain under deployed. Addressing this gap, the SBAS project presents an innovative approach, integrating it as a unified virtual AS within the prevailing BGP-oriented Internet. Through this, SBAS aims to provide hundreds of thousands of users with secure routing via the established SCION network.
Tackling key challenges:

• Sustainability: Using SCION's path-aware infrastructure, SBAS offers optimized "green" routing, minimizing the Internet's carbon footprint.
• Cross-Atlantic Digital Governance: Unlike the traditional singular trust model, SCION promotes individualized trust-based connections. SBAS, leveraging SCION, fosters secure cross-border data interactions for regular Internet users.
• Data Security and Privacy: In today's Internet, control vulnerabilities and hijacking are concerns. SCION introduces defined sovereign Internet regions, and SBAS, built atop it, ensures data sovereignty and geo-fencing while resisting hijacking attacks, all without compromising global communication.

The project's core goal is deploying and evaluating SBAS across the operational SCION network, enriching secure routing access for a vast user base. To materialize this, we'll establish SBAS Points of Presence (PoPs) within SCION, serving as a foundation for experiments and performance evaluations, underscoring SBAS's advancements in security and efficiency.