Autonomous security for autonomous systems

Computer Networks

Volumn 52, Issue 15, 2008, Pages 2908-2923

  Karlin, Josh ^a   Forrest, Stephanie ^a,b   Rexford, Jennifer ^c  

^a University of New Mexico   (United States)

^b SANTA FE INSTITUTE   (United States)

^c Princeton University   (United States)

Author keywords

Anomaly; BGP; Interdomain; Security

Indexed keywords

CHLORINE COMPOUNDS; CRYPTOGRAPHY; INTERNET; INTERNET PROTOCOLS; NETWORK PROTOCOLS; PUBLIC KEY CRYPTOGRAPHY; SECURITY OF DATA; SOLUTIONS;

ANOMALY; AUTONOMOUS NATURE; AUTONOMOUS SECURITY; AUTONOMOUS SYSTEMS; BGP; BUSINESS RELATIONSHIPS; CENTRALIZED CONTROL; COMPLEX NETWORKS; CRYPTOGRAPHIC METHODS; DISTRIBUTED ANOMALY DETECTION; DISTRIBUTED APPROACHES; DISTRIBUTED NETWORKS; GLOBAL PROTECTION; INCREMENTAL DEPLOYMENT; INTER-DOMAIN ROUTING; INTERDOMAIN; INTERNET TOPOLOGIES; PROVABLY SECURE; PUBLIC-KEY INFRASTRUCTURE; RESPONSE SYSTEMS; SECURITY; SECURITY MECHANISMS; SECURITY METHODS; SECURITY PROTOCOLS; SECURITY SOLUTION; SIMULATION EXPERIMENTS;

ROUTING PROTOCOLS;

EID: 52049098470     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2008.06.012     Document Type: Article

References (47)

1. S. Murphy, BGP Security Vulnerabilities Analysis, RFC 4272, January 2006.
2. R. Mahajan, D. Wetherall, T. Anderson, Understanding BGP misconfiguration, in: Proceedings of ACM SIGCOMM, 2002, pp. 3-16.
3. Renesys Blog, Pakistan Hijacks YouTube, .
4. J. Karlin, S. Forrest, J. Rexford, Pretty good BGP: Improving BGP by cautiously adopting routes, in: Proceedings of IEEE International Conference on Network Protocols, November 2006.
5. P. Boothe, J. Hiebert, R. Bush, How prevalent is prefix hijacking on the Internet? NANOG 36 , February 2006.
6. S.A. Misel, Wow, AS7007! , April 1997.
7. Internet Alert Registry forums, , November 2006.
8. Renesys Blog, Con-Ed Steals the'Net, .
9. V.J. Bono, 7007 explanation and apology, , April 1997.
10. American Registry for Internet Numbers, .
11. RIPE, .
12. Asia Pacific Network Information Centre, .
13. W. Leibzon, Question on 7.0.0.0/8, , April 2007.
14. H. Chan, D. Dash, A. Perrig, H. Zhang, Modeling adoptability of secure BGP protocol, in: SIGCOMM New York, NY, USA, ACM, 2006, pp. 279-290.
15. J. Karlin, S. Forrest, J. Rexford, Protecting BGP from Invalid Paths, University of New Mexico TR-CS-2007-12, 2007.
16. Y. Rekhter, T. Li, S. Hares, A border gateway protocol 4 (BGP-4), RFC 4271 (Draft Standard), Jan. 2006. Available: .
17. Gao L. On inferring autonomous system relationships in the Internet. IEEE/ACM Transactions on Networking 9 6 (2001)
18. H. Ballani, P. Francis, X. Zhang, A study of prefix hijacking and interception in the Internet, in: SIGCOMM, New York, NY, USA, ACM, 2007, pp. 265-276.
19. A. Ramachandran, N. Feamster, Understanding the network-level behavior of spammers, in: Proceedings of ACM SIGCOMM, New York, NY, USA, 2006, pp. 291-302.
20. C. Kruegel, D. Mutz, W. Robertson, FredrikValeur, Topology-based detection of anomalous BGP messages, in: Proceedings of Symposium on Recent Advances in Intrusion Detection, vol. 2820, September 2003, pp. 17-35.
21. Kent S., Lynn C., and Seo K. Secure border gateway protocol. IEEE Journal on Selected Areas in Communications 18 4 (2000) 582-592
22. J. Ng, Extensions to BGP to support secure origin BGP (soBGP), expired internet draft draft-ng-sobgp-bgp-extensions-02, April 2004.
23. T. Wan, E. Kranakis, P. van Oorschot, Pretty secure BGP, psBGP, in: Proceedings of Network and Distributed System Security, 2005.
24. Y.-C. Hu, D. McGrew, A. Perrig, B. Weis, D. Wendlandt, (r)Evolutionary bootstrapping of a global PKI for securing BGP, in: Hot Topics in Networks Workshop, November 2006.
25. L. Subramanian, V. Roth, I. Stoica, S. Shenker, R. Katz, Listen and whisper: security mechanisms for BGP, in: Proceedings of Networked Systems Design and Implementation, March 2004.
26. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S.F. Wu, L. Zhang, Detection of invalid routing announcement in the internet, in: Proceedings of Dependable Systems and Networks, 2002.
27. Wang L., Zhao X., Pei D., Bush R., Massey D., and Zhang L. Protecting BGP routes to top level DNS servers. IEEE Transactions on Parallel and Distributed Systems 14 9 (2003) 851-860
28. X. Hu, Z.M. Mao, Accurate real-time identification of IP prefix hijacking, in: Proceedings of IEEE Security and Privacy, 2007.
29. G. Goodell, W. Aiello, T. Griffin, J. Ioannidis, P. McDaniel, A. Rubin, Working around BGP: An incremental approach to improving security and accuracy of interdomain routing, in: Proceedings of Network and Distributed Systems Security, February 2003.
30. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S.F. Wu, L. Zhang, An analysis of BGP multiple origin AS (MOAS) conflicts, in: Proceedings of Internet Measurement Workshop, November 2001.
31. J. Qiu, L. Gao, S. Ranjan, A. Nucci, Detecting bogus BGP route information: going beyond prefix hijacking, SecureComm, 2007.
32. L. Wang, X. Zhao, D. Pei, R. Bush, D. Massey, A. Mankin, S.F. Wu, L. Zhang, Observation and analysis of BGP behavior under stress, in: Proceedings of 2nd ACM SIGCOMM Workshop on Internet Measurement, 2002, pp. 183-195.
33. J. Rexford, J. Wang, Z. Xiao, Y. Zhang, BGP routing stability of popular destinations, in: Proceedings of Internet Measurement Workshop, 2002.
34. Faloutsos M., Faloutsos P., and Faloutsos C. On power-law relationships of the internet topology. Computer Communication Review 29 (1999) 251-262
35. Holme P., Karlin J., and Forrest S. Radial structure of the internet. Proceedings of the Royal Society A 463 (2007) 1231-1246
36. Internet Alert Registry, .
37. RouteViews, .
38. Renesys routing intelligence, .
39. M. Lad, D. Massey, D. Pei, Y. Wu, B. Zhang, L. Zhang, PHAS: A prefix hijack alert system, in: Proceedings of USENIX Security Symposium, 2006.
40. North American Network Operators Group, .
41. African Network Operators Group, .
42. Australian Network Operators Group, .
43. Japan Network Operators Group, .
44. Pacific Network Operators Group, .
45. J. Karlin, S. Forrest, J. Rexford, BGP simulator (BSIM), .
46. The CAIDA AS relationships dataset, , February 2007.
47. C. Zheng, L. Ji, D. Pei, J. Wang, P. Francis, A light-weight distributed scheme for detecting ip prefix hijacks in real-time, in: Proceedings of ACM SIGCOMM, 2007, pp. 277-288.