Detecting bogus BGP route information: Going beyond prefix hijacking

Proceedings of the 3rd International Conference on Security and Privacy in Communication Networks, SecureComm

Volumn , Issue , 2007, Pages 381-390

  Qiu, Jian ^a   Gao, Lixin ^a   Ranjan, Supranamaya ^b   Nucci, Antonio ^b  

^a UNIVERSITY OF MASSACHUSETTS   (United States)

^b Narus Inc   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNATIONAL CONFERENCES; ROUTING INFORMATION; SECURITY AND PRIVACY;

ALARM SYSTEMS; GATEWAYS (COMPUTER NETWORKS); INTERNET; INTERNET PROTOCOLS; INTERNET SERVICE PROVIDERS; NETWORK ROUTING; ROUTING PROTOCOLS; SIGNAL DETECTION; TELECOMMUNICATION NETWORKS; TERMINOLOGY; WIRELESS TELECOMMUNICATION SYSTEMS;

COMPUTER NETWORKS;

EID: 51349120643     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECCOM.2007.4550358     Document Type: Conference Paper

References (29)

1. Y. Rekhter, T. Li, and S. H. Ed., "A Border Gateway Protocol 4 (BGP-4)," IETF, RFC 4271, January 2006.
2. "Wow, AS7007!" http://www.merit.edu/mail.archives/nanog/1997- 04/msg00340.html.
3. A. Ramachandran and N. Feamster, "Understanding the Network-Level Behavior of Spammers," in Proceedings of ACM SIGCOMM, Pisa, Italy, September 2006.
4. S. Ranjan, R. Swaminathan, M. Uysal, and E. Knightly, "DDoS-Resilient Scheduling to Counter Application Layer Attacks under Imperfect Detection," in Proceedings of IEEE INFOCOM, Barcelona, Spain, 2006.
5. S. Kent, C. Lynn, and K. Seo, "Secure Border Gateway Protocol (Secure-BGP)," IEEE Journal on Selected Areas in Communications, vol. 18, no. 4, pp. 582-592, April 2000.
6. R. White, "Architecture and Deployment Considerations for Secure Origin BGP (soBGP)," IETF, Internet draft draft-white-sobgp-architecture- 01, May 2005.
7. H. Chan, D. Dash, A. Perrig, and H. Zhang, "Modeling Adoptability of Secure BGP Protocols," in Proceedings of ACM SIGCOMM, Pisa, Itality, September 2006.
8. R. Mahajan, D. Wetherall, and T. Anderson, "Understanding BGP Misconguration," in Proceedings of ACM SIGCOMM, August 2002.
9. G. Siganos and M. Faloutsos, "Analyzing BGP Policies: Methodology and Tool," in Proceedings of IEEE INFOCOM, Hong Kong, China, March 2004.
10. J. Karlin, S. Forrest, and J. Rexford, "Pretty Good BGP: Improving BGP by Cautiously Adopting Routes," in Proceedings of IEEE ICNP, November 2006.
11. M. Lad, D. Massey, D. Pei, Y. Wu, B. Zhang, and L. Zhang, "PHAS: A Prefix Hijack Alert System," in Proceedings of 15th USENIX Security Symposium, 2006.
12. J. S. Sauver, "Route Injection and Spam," Toronto, Ontario, Canada, October 2006.
13. C. Krügel, D. Mutz, W. K. Robertson, and F. Valeur, "Topology-Based Detection of Anomalous BGP Messages," in RAID, 2003, pp. 17-35.
14. Xin Hu and Z. Morley Mao, "Accurate Real-time Identinfication of IP Prefix Hijacking," in Proceedings of IEEE Security and Privacy, Oakland, 2007.
15. "Route Views Project Page," http://www.routeviews.org.
16. "RIPE Route Information Service," http://www.ripe.net/ris/ index.html.
17. J. Qiu. L. Gao, S. Ranjan, and A. Nucci, "Detecting Bogus BGP Route Information: Going Beyond Prefix Hijacking," Department of ECE, University of Massachusetts, Amherst, Tech. Rep. TR-07-CSE-04, June 2007, http://rio.ecs.umass.edu/j̃qiu/bgpsieve2tech.pdf.
18. "Policies for IPv4 address space management in the Asia Pacific region," APNIC, Tech. Rep. APNIC-086, December 2005.
19. D.-F. Chang, R. Govindan, and J. S. Heidemann, "The Temporal and Topological Characteristics of BGP Path Changes," in ICNP, 2003.
20. J. Wu, Z. M. Mao, J. Rexford, and J. Wang, "Finding a Needle in a Haystack: Pinpointing Signinficant BGP Routing Changes in an IP Network," in Proceedings of Networked Systems Design and Implementation, May 2005.
21. N. Feamster, J. Jung, and H. Balakrishnan, "An Empirical Study of "Bogon" Route Advertisements," ACM SIGCOMM Computer Communications Review, January 2005.
22. B. Woodcock, "Best Practices in IPv4 Anycast Routing," 2002, http://www.pch.net/resources/papers/ipv4-anycast/ipv4-anycast.ppt.
23. "AUTONOMOUS SYSTEM NUMBERS," http://www.iana.org/assignments/ as-numbers.
24. "Anatomy of a Leak: AS9121 (or, "How We Learned To Start Worrying and Hate Maximum Prefix Limits")," http://nanog.org/mtg-0505/ underwood.html.
25. "Con-Ed Steals the "Net," http://www.renesys.com/blog/ 2006/01/coned-steals-the-net.shtml.
26. "Pretty Good BGP and the Internet Alert Registry," http://www.nanog.org/mtg-0606/karlin.html.
27. J. Karlin, "a fun hijack:1/8, 2/8, 3/8, 4/8, 5/8, 7/8, 8/8, 12/8 briefly announced by AS 23520 (today)," http://www.merit.edu/mail.archives/ nanog/2006-06/msg00082.html.
28. "Good/Sprint having problems?" http://www.cctec.com/maillists/ nanog/current/msg05514.html.
29. "www.google.com latency/packet loss/very slow thru savvis," http://www.merit.edu/mail.archives/nanog/2005-12/msg00219.html.