A study of prefix hijacking and interception in the internet

Computer Communication Review

Volumn 37, Issue 4, 2007, Pages 265-276

  Ballani, Hitesh ^a   Francis, Paul ^a   Zhang, Xinyang ^a  

^a Cornell University ^*  (United States)

Author keywords

BGP; Hijacking; Interception; Routing

Indexed keywords

BGP; BLACK HOLES; HIJACKING; INTERCEPTION PROBLEM; PREFIX HIJACKING; REAL TRAFFIC; ROUTING;

COMMUNICATION; SATELLITE INTERCEPTION;

INTERNET;

EID: 70350437166     PISSN: 01464833     EISSN: 19435819     Source Type: Conference Proceeding    
DOI: 10.1145/1282427.1282411     Document Type: Article

References (53)

1. "Nanog Mailing List," http://www.nanog.org/mailinglist.html.
2. "7007 Explanation and Apology," Apr 1997, http://www.merit.edu/ mail.archives/nanog/1997-04/msg00444.html.
3. M. Lad, D. Massey, D. Pei, Y. Wu, B. Zhang, and L. Zhang, "PHAS: A prefix hijack alert system," in Proc. of USENIX Security symposium, 2006.
4. J. Karlin, S. Forrest, and J. Rexford, "Pretty Good BGP: Improving BGP by Cautiously Adopting Routes," in Proc. of ICNP, 2006.
5. T. Wan and P. C. van Oorschot, "Analysis of BGP Prefix Origins During Google's May 2005 Outage," in Proc. of Security in Systems and Networks, 2006.
6. P. Boothe, J. Hiebert, and R. Bush, "Short-Lived Prefix Hijacking on the Internet," NANOG 36 meeting, 2006, http://www.nanog.org/mtg-0602/pdf/ boothe.pdf.
7. Y.-C. Hu, A. Perrig, and M. Sirbu, "SPV: secure path vector routing for securing BGP," in Proc. of ACM SIGCOMM, 2004.
8. S. Kent, C. Lynn, and K. Seo, "Secure border gateway protocol (S-BGP)," IEEE Journal on Selected Areas in Communication, vol. 18, no. 4, 2000.
9. L. Subramanian, V. Roth, I. Stoica, S. Shenker, and R. Katz, "Listen and whisper: Security mechanisms for BGP," in Proc. of USENIX/ACM NSDI, 2004.
10. T. Wan, E. Kranakis, and P. van Oorschot, "Pretty Secure BGP, psBGP," in Proc. of NDSS, 2005.
11. R. White, "Architecture and Deployment Considerations for Secure Origin BGP (soBGP)," draft-white-sobgp-architecture-01, Nov 2005.
12. W. Aiello, J. Ioannidis, and P. McDaniel, "Origin authentication in interdomain routing," in Proc. of conference on Computer and communications security (CCS), 2003.
13. B. Smith and J. Garcia-Luna-Aceves, "Securing the Border Gateway Routing Protocol," in Proc. of Global Internet, 1996.
14. G. Goodell, W. Aiello, T. Griffin, J. Ioannidis, P. McDaniel, and A. Rubin, "Working Around BGP: An Incremental Approach to Improving Security and Accuracy of Interdomain Routing," in Proc. of NDSS, 2003.
15. C. Kruegel, D. Mutz, W. Robertson, and F. Valeur, "Topology-based Detection of Anomalous BGP Messages," LNCS, 2003.
16. L. Wang, X. Zhao, D. Pei, R. Bush, D. Massey, A. Mankin, S. F. Wu, and L. Zhang, "Protecting BGP Routes to Top Level DNS Servers," in Proc. of ICDCS, 2003.
17. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. F. Wu, and L. Zhang, "Detection of Invalid Routing Announcement in the Internet," in Proc. of DSN, 2002.
18. S. T. Teoh, K. Zhang, S.-M. Tseng, K.-L. Ma, and S. F. Wu, "Combining visual and automated data mining for near-real-time anomaly detection and analysis in BGP," in Proc. of ACM workshop on Visualization and data mining for computer security, 2004.
19. "RIPE MyASN service," http://www.ris.ripe.net/myasn.html.
20. X. Hu and Z. M. Mao, "Accurate Real-time Identification of IP Prefix Hijacking," in Proc. of IEEE Security and Privacy (Oakland), 2007.
21. C. Zheng, L. Ji, D. Pei, J. Wang, and P. Francis, "A Light-Weight Distributed Scheme for Detecting IP Prefix Hijacks in Realtime," in Proc. of ACM SIGCOMM, August 2007.
22. O. Nordstrom and C. Dovrolis, "Beware of BGP attacks," SIGCOMM Comput. Commun. Rev., vol. 34, no. 2, 2004.
23. A. Ramachandran and N. Feamster, "Understanding the Network-Level Behavior of Spammers," in Proc. of ACM SIGCOMM, 2006.
24. J. Kim, S. Y. Ko, D. M. Nicol, X. A. Dimitropoulos, and G. F. Riley, "A BGP Attack Against Traffic Engineering," in Proc. of WSC, 2004.
25. "Route Views Project Page," May 2006, www.route-views.org.
26. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. F. Wu, and L. Zhang, "An analysis of BGP multiple origin AS (MOAS) conflicts," in Proc. of ACM SIGCOMM IMW, 2001.
27. C. Labovitz, A. Ahuja, R. Wattenhofer, and V. Srinivasan, "The Impact of Internet Policy and Topology on Delayed Routing Convergence," in Proc. of IEEE INFOCOM, 2001.
28. F. Wang and L. Gao, "On Inferring and Characterizing Internet Routing Policies," in Proc. of ACM SIGCOMM conference on Internet measurement, 2003.
29. "BGP Best Path Selection Algorithm," July 2006, http://www.cisco.com/warp/public/459/25.shtml.
30. L. Gao, "On Inferring Autonomous System relationships in the Internet," IEEE/ACM Trans. Netw., vol. 9, no. 6, 2001.
31. B. Huffaker, "CAIDA AS Ranking Project," July 2006, http://www.caida.org/analysis/topology/rank-as/.
32. "Tier 1 network - Wikipedia entry," July 2006, http://en.wikipedia.org/wiki/Tier1network.
33. J. Rexford, J. Wang, Z. Xiao, and Y. Zhang, "BGP routing stability of popular destinations," in Proc. of Internet Measurment Workshop, 2002.
34. "Alexa Top Sites," http://www.alexa.com/site/ds/top-sites?ts- mode=global.
35. A. Ma, "CAIDA AS Relationships," July 2006, http://www.caida.org/data/active/as-relationships/.
36. "Quagga Routing Suite," Apr 2006, http://www.quagga.net/.
37. G. Huston, "Auto-Detecting Hijacked Prefixes?" RIPE 50 meeting, 2005, http://www.ripe.net/ripe/meetings/ripe-50/presentations/index.html.
38. H. Madhyastha, T. Isdal, M. Piatek, C. Dixon, T. Anderson, A. Krishnamurthy, and A. Venkataramani., "iPlane: An Information Plane for Distributed Services," in Proc. of OSDI, 2006.
39. B. Chun, D. Culler, T. Roscoe, A. Bavier, L. Peterson, M. Wawrzoniak, and M. Bowman, "PlanetLab: An Overlay Testbed for Broad-Coverage Services," ACM SIGCOMM Computer Communication Review, vol. 33, no. 3, July 2003.
40. A. Broido and kc claffy, "Analysis of RouteViews BGP data: policy atoms," in Proc. of network-related data management (NRDM) workshop, 2001.
41. Z. M. Mao, J. Rexford, J. Wang, and R. H. Katz, "Towards an accurate AS-level traceroute tool," in Proc. of ACM SIGCOMM, 2003.
42. "SprintLink's BGP Policy," May 2006, http://www.sprintlink.net/ policy/bgp.html.
43. D. Wendlandt, I. Avramopoulos, D. G. Andersen, and J. Rexford, "Don't Secure Routing Protocols, Secure Data Delivery," in Proc. of workshop on Hot Topics in Networks, 2006.
44. M. Lad, R. Oliveira, B. Zhang, and L. Zhang, "Understanding Resiliency of Internet Topology Against Prefix Hijack Attacks," in Proc. of IEEE/IF IP DSN, 2007.
45. W. Mühlbauer, A. Feldmann, O. Maennel, M. Roughan, and S. Uhlig, "Building an AS-topology model that captures route diversity," in Proc. of ACM Sigcomm, 2006.
46. S. Convery, D. Cook, and M. Franz, "An Attack Tree for the Border Gateway Protocol," draft-convery-bgpattack-01, July 2001.
47. R. Mahajan, D. Wetherall, and T. Anderson, "Understanding BGP misconfiguration," in Proc. of ACM SIGCOMM, 2002, pp. 3-16.
48. N. Feamster, J. Jung, and H. Balakrishnan, "An empirical study of "bogon" route advertisements," SIGCOMM Comput. Commun. Rev., vol. 35, no. 1, 2005.
49. N. Feamster and H. Balakrishnan, "Detecting BGP Configuration Faults with Static Analysis," in Proc. of Symp. on Networked Systems Design and Implementation (NSDI), 2005.
50. F. Baker, B. Foster, and C. Sharp, "RFC 3924 - Cisco Architecture for Lawful Intercept in IP Networks," Oct 2004.
51. "Content Verification - Man in the Middle Attack," Jan 2007, http://www.content-verification.com/man-in-the-middle/index.html.
52. "Mattias Eriksson, An Example of a Man-in-the-middle Attack Against Server Authenticated SSL-sessions," Jan 2007, http://www.cs.umu.se/ education/examina/Rapporter/MattiasEriksson.pdf.
53. K. Fujiwara, "DNS Process-in-the-middle Attack," ICANN Presentation, 2005, http://www.icann.org/presentations/dns-attack-MdP-05apr05. pdf.