A statistical approach to anomaly detection in interdomain routing

2006 3rd International Conference on Broadband Communications, Networks and Systems, BROADNETS 2006

Volumn , Issue , 2006, Pages

  Deshpande, S ^a   Thottan, M ^b   Ho, T K ^b   Sikdar, B ^a  

^a RENSSELAER POLYTECHNIC INSTITUTE   (United States)

^b LUCENT TECHNOLOGIES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTIONS; INTER-DOMAIN ROUTING; INTERNATIONAL CONFERENCES;

ADMINISTRATIVE DATA PROCESSING; ALARM SYSTEMS; BOOLEAN FUNCTIONS; COMPUTER CRIME; FEATURE EXTRACTION; FINANCIAL DATA PROCESSING; INTERNET; INTERNET PROTOCOLS; PATTERN RECOGNITION; ROUTERS; STATISTICAL METHODS; TELECOMMUNICATION NETWORKS; TELECOMMUNICATION SYSTEMS;

COMPUTER NETWORKS;

EID: 51749125078     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/BROADNETS.2006.4374397     Document Type: Conference Paper

References (28)

1. B. Zhang, D. Pei, D. Massey, and L. Zhang, "Timer Interaction in Route Flap Dampening," In Procs. of the 25th International Conference on Distributed Computing Systems (ICDCS), pp. 393-403, Columbus, OH, June, 2005.
2. J. Zhang, J. Rexford and J. Feigenbaum, "Learning-Based Anomaly Detection in BGP Updates," In Procs. of the 2005 ACM MineNet Workshop, pp. 219-220, Philadelphia, PA, Aug, 2005.
3. H. Wang, K. C. Chang, D. Chiu, C. S. Lui "Characterizing the Performance and Stability Issues of the AS Path Prepending Method: Taxonomy, Measurement Study and Analysis"ACM SIGCOMM Asia Workshop, Beijing, China, April, 2005.
4. J. Wu, Z. M. Mao, J. Rexford and J. Wang. "Finding a Needle in a Haystack: Pinpointing Significant BGP Routing Changes in an IP Network," In Procs. of Networked Systems Design and Implementation, Boston, MA, May, 2005.
5. J. Wang, X. Chen and W. Gao, "Online selecting discriminative tracking features using particle filter," IEEE Computer Society Conference on Computer Vision and Pattern Recognition, CVPR Volume 2, pp. 1037-1042, San Diego, CA, June, 2005.
6. N. Feamster, "Practical Verification Techniques for Wide Area Routing," ACM Sigcomm Computer Communication Review, vol. 34, no. 1, pp. 87-92, January 2004.
7. S. Deshpande, M. Thottan and B. Sikdar, "Early Detection of BGP Instabilities Resulting from Internet Worm Attacks," In Procs. of IEEE GLOBECOM, pp. 2266-2270, Dallas, TX, Nov, 2004.
8. D. Pei, M. Azuma, D. Massey, and L. Zhang, "BGP-RCN: Improving BGP Convergence through Root Cause Notification," Computer Networks and ISDN Systems, Vol. 48, no. 2, pp. 175-194, June 2005.
9. D. Pei, M. Lad, D. Massey, and L. Zhang, "Route Diagnosis in Path Vector Protocols," ACM Sigcomm Poster Session, September, 2004.
10. S. T. Teoh, K. Zhang, S. Tseng, K. Ma and F. Wu, "Combining Visual and Automated Data Mining for Near-Real-Time Anomaly Detection and Analysis in BGP," In Procs. of CCS Workshop on Visualization and Data Mining for Computer Security, ACM Conference on Computer and Communications Security,' pp. 35-44, Washington, DC, Oct, 2004.
11. T. K. Ho, "Mirage: Interactive Tools for Pattern Discovery," In Procs. of the 17th International Conference on Pattern Recognition, pp. 509-512, Cambridge, U.K., Aug, 2004.
12. M. Roughan, T. Griffin, M. Mao, A. Greenberg, B. Freeman, "Combining Routing and Traffic Data for Detection of IP Forwarding Anomalies," In Procs. of ACM SIGCOMM NeTs Workshop, Portland, OR, Aug, 2004.
13. M. Lad, X. Zhao, B. Zhang , D. Masey and L. Zhang, " Analysis of BGP Update Surge during the Slammer Worm Attack," 5th International Workshop on Distrbuted Computing (IWDC), pp. 66-79, Kolkata, India, Dec, 2003.
14. A. Bremler-Barr, Y. Afek and S. Schwarz, "Improved BGP Convergence via Ghost Flushing," In Procs. of IEEE INFOCOM, San Francisco, CA, March 2003.
15. Réseaux IP Européens Network Coordination Center, http://www.ripe.net/projects/ris/rawdata.html.
16. S. T. Teoh, K. Ma, S. F. Wu, D. Massey, X. Zhao, D. Pei, L. Wang, L. Zhang and R. Bush, " Visual-based Anomaly Detection for BGP Origin Change Events," In Procs. of the 14th IFIP/IEEE Workshop on Distributed Systems: Operations and Management, pp. 155-168, Heidelberg, Germany, October, 2003.
17. M. Thottan and C. Ji, "Anomaly detection in IP networks," IEEE Transactions on Signal Processing, vol. 51, no. 8, pp.2191-2204, Aug, 2003.
18. Z. Mao, R. Govindan, G. Varghese and R. Katz, " Route flap dampening exacerbates internet routing convergence," In Procs. of the 2002 conference on Applications, technologies, architectures and protocols for computer communications, pp. 221-233, Pittsburh, PA, Aug, 2002.
19. D. Pei, X. Zhao, L. Wang, D. Massey, A. Mankin, S. Wu and L. Zhang, "Improving BGP Convergence through consistency assertions," In Procs of IEEE INFOCOM, pp. 902-911, New York, NY, June 2002.
20. L. Wang, X. Zhao, D. Pei, R. Bush, D. Massey, A. Mankin, S. F.Wu, and L. Zhang, "Observation and Analysis of BGP Behavior Under Stress," in Proc. of ACM SIGCOMM Internet Measurement Workshop, pp. 183-195, Marseille, France, Nov, 2002.
21. T. K. Ho, Mitra Basu, "Complexity Measures of Supervised Classification Problems," IEEE Transactions on Pattern Analysis and Machine Intelligence, vol. 24, no. 3, pp. 289-300, March, 2002.
22. J. Cowie, A. Ogleski, B. Premore, and Y. Yuan, "Global routing instabilities during Code Red II and Nimda worm propogation," Technical Report, Renesys Corporation, Dec, 2001.
23. nd Ed.," Jonh Wiley and Sons, 2001.
24. C. Labovitz, A. Ahuja, A. Bose, and F. Jahanian. "Delayed Internet Routing Convergence," In Procs. of SIGCOMM, pp. 175-187, Stockholm, Sweden, Aug, 2000.
25. U. Appel, A. Brandt, "Adaptive Sequential Segmentation of Piecewise Stationary Time Series," Information Sciences vol. 29, no. 1., pp. 27-56,1983.
26. R. A. Wagner and M. J. Fisher, "The string to string correction problem," Journal of Assoc. Comp. Mach., vol. 21, no. 1, pp. 168-173, Jan, 1974.
27. H. Akaike, " Information theory as an extension of the maximum likelihood principle" In Procs. of the Second International Symposium on information theory, pp. 267-281, Budapest, Hungary, 1973.
28. North American Network Operators Group mailing list, http://www.merit. edu/mail.archives/nanog/