A light-weight distributed scheme for detecting IP prefix hijacks in real-time

Computer Communication Review

Volumn 37, Issue 4, 2007, Pages 277-288

  Zheng, Changxi ^b   Ji, Lusheng ^a   Pei, Dan ^a   Wang, Jia ^a   Francis, Paul ^b  

^a AT AND T LABS RESEARCH   (United States)

^b School of Operations Research and Information Engineering   (United States)

Author keywords

BGP; Detection; Hijacking; Interception; Routing

Indexed keywords

BGP; DISTRIBUTED SCHEMES; FALSE POSITIVE AND FALSE NEGATIVES; HIJACKING; INTERNET MEASUREMENT; IP PREFIX HIJACKINGS; MULTIPLE VANTAGE POINTS; ROUTING;

COMMUNICATION; ERROR DETECTION; SATELLITE INTERCEPTION;

INTERNET PROTOCOLS;

EID: 70350444325     PISSN: 01464833     EISSN: 19435819     Source Type: Conference Proceeding    
DOI: 10.1145/1282427.1282412     Document Type: Article

References (36)

1. RIPE RIS Raw Data. http://www.ripe.net/projects/ris/rawdata.html.
2. University of Oregon Route Views Archive Project. http://www.routeview. org.
3. W. Aiello, J. Ioannidis, and P. McDaniel. Origin Authentication in Interdomain Routing. In Proc. of ACM CCS, Oct. 2003.
4. H. Ballani, P. Francis, and X. Zhang. A Study of Prefix Hijacking and Interception in the Internet. In Proc. ACM SIGCOMM, Aug. 2007.
5. M. Basseville and I. V. Nikiforov. Detection of Abrupt Changes: Theory and Application. 1993. Prentice-Hall, Inc.
6. K. Butler, P. McDaniel, and W. Aiello. Optimizing BGP Security by Exploiting Path Stability. In Proc. ACM CCS, Nov. 2006.
7. H. Chan, D. Dash, A. Perrig, and H. Zhang. Modeling Adoptability of Secure BGP Protocols. In Proc. ACM SIGCOMM, Sept. 2006.
8. V. Gill, J. Heasley, and D. Meyer. The Generalized TTL Security Mechanism (GTSM). RFC 3682, Feb. 2004. http://www.ietf.org/rfc/rfc3682.txt.
9. G. Goodell, W. Aiello, T. Griffin, J. Ioannidis, P. McDaniel, and A. Rubin. Working Around BGP: An Incremental Approach to Improving Security and Accuracy of Interdomain Routing. In Proc. NDSS, Feb. 2003.
10. X. Hu and Z. M. Mao. Accurate Real-time Identification of IP Prefix Hijacking. In Proc. IEEE Security and Privacy, May 2007.
11. Y.-C. Hu, A. Perrig, and M. Sirbu. SPV: Secure Path Vector Routing for Securing BGP. In Proc. ACM SIGCOMM, Aug. 2004.
12. iPlane. http://iplane.cs.washington.edu/.
13. C. Jin, H. Wang, and K. G. Shin. Hop-Count Filtering: An Effective Defense Against Spoofed DDos Traffic. In Proc. ACM CCS, Oct. 2003.
14. S. Johnson. Hierarchical Clustering Schemes. In Psychometrika, 1967.
15. J. Karlin, S. Forrest, and J. Rexford. Pretty Good BGP: Protecting BGP by Cautiously Selecting Routes. In Proc. IEEE ICNP, Nov. 2006.
16. S. Kent, C. Lynn, and K. Seo. Secure Border Gateway Protocol (S-BGP). IEEE JSAC Special Issue on Network Security, Apr. 2000.
17. J. Kim, S. Y. Ko, D. M. Nicol, X. A. Dimitropoulos, and G. F. Riley. A BGP Attack against Traffic Engineering. In Proc. of the 36th conference on Winter simulation, 2004.
18. C. Kruegel, D. Mutz, W. Robertson, and F. Valeur. Topology-based Detection of Anomalous BGP Messages. In Proc. RAID, Sept. 2003.
19. M. Lad, D. Massey, D. Pei, Y. Wu, B. Zhang, and L. Zhang. PHAS: A Prefix Hijack Alert System. In Proc. USENIX Security Symposium, Aug. 2006.
20. M. Lad, R. Oliveira, B. Zhang, and L. Zhang. Understanding Resiliency of Internet Topology Against Prefix Hijack Attacks. In Proc. IEEE/IFIP DSN, June 2007.
21. R. Mahajan, D. Wetherall, and T. Anderson. Understanding BGP Misconfiguration. In Proc. of ACM SIGCOMM, Aug. 2002.
22. Z. M. Mao, J. Rexford, J. Wang, and R. Katz. Towards an Accurate AS-level Traceroute Tool. In Proc. ACM SIGCOMM, 2003.
23. RIPE myASn System. http://www.ris.ripe.net/myasn.html.
24. Aki Nakao. PLUTO BGP Sensor/BGP Feed. http://www.planet-lab-jp.org/pluto/ pluto-bgp-sensor.html.
25. J. Ng. Extensions to BGP to Support Secure Origin BGP. ftp://ftp-eng.cisco.com/sobgp/drafts/draft-ng-sobgp-bgp-extensions-02.txt, April 2004.
26. O. Nordstrom and C. Dovrolis. Beware of BGP Attacks. ACM SIGCOMM Computer Communications Review (CCR), Apr. 2004.
27. PlanetLab. http://www.planet-lab.org.
28. S. Y. Qiu, F. Monrose, A. Terzis, and P. D. McDaniel. Efficient Techniques for Detecting False Origin Advertisements in Inter-domain Routing. In Proc. IEEE NPsec, Nov. 2006.
29. A. Ramachandran and N. Feamster. Understanding the Network-Level Behavior of Spammers. In Proc. ACM SIGCOMM, Sept. 2006.
30. G. Siganos and M. Faloutsos. Neighborhood Watch for Internet Routing: Can We Improve the Robustness of Internet Routing Today? In Proc. IEEE INFOCOM, May 2007.
31. B. R. Smith and J. J. Garcia-Luna-Aceves. Securing the Border Gateway Routing Protocol. In Proc. Global Internet, Nov. 1996.
32. L. Subramanian, V. Roth, I. Stoica, S. Shenker, and R. H. Katz. Listen and Whisper: Security Mechanisms for BGP. In Proc. USENIX NSDI, Mar. 2004.
33. R. Teixeira, S. Agarwal, and J. Rexford. BGP Routing Changes: Merging Views from Two ISPs. In ACM SIGCOMM Computer Communication Review, Oct. 2005.
34. L. Wang, X. Zhao, D. Pei, R. Bush, D. Massey, A. Mankin, S. Wu, and L. Zhang. Protecting BGP Routes to Top Level DNS Servers. In Proc. IEEE ICDCS, 2003.
35. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. Wu, and L. Zhang. An Analysis BGP Multiple Origin AS(MOAS) Conflicts. In Proc. ACM IMW, Oct. 2001.
36. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. Wu, and L. Zhang. Dection of Invalid Routing Announcement in the Internet. In Proc. IEEE/IFIP DSN, June 2002.