Netreview: Detecting when interdomain routing goes wrong

Proceedings of the 6th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2009

Volumn , Issue , 2009, Pages 437-452

  Haeberlen, Andreas ^a,c   Avramopoulos, Ioannis ^d   Rexford, Jennifer ^b   Druschel, Peter ^a  

^a MAX PLANCK INSTITUTE FOR SOFTWARE SYSTEMS   (Germany)

^b PRINCETON UNIVERSITY   (United States)

^c RICE UNIVERSITY   (United States)

^d DEUTSCHE TELEKOM LABORATORIES   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

BORDER GATEWAY PROTOCOL; GATEWAYS (COMPUTER NETWORKS); INTERNET SERVICE PROVIDERS; ROUTING PROTOCOLS; SYSTEMS ANALYSIS;

CONFIGURATION ERRORS; FAULT DETECTION SYSTEMS; HIGH LEVEL DESCRIPTION; INTENTIONAL ATTACKS; INTER-DOMAIN ROUTING SYSTEMS; INTERDOMAIN ROUTING; RESOURCE REQUIREMENTS; SENSITIVE INFORMATIONS;

FAULT DETECTION;

EID: 85076898069     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (37)

1. D. Andersen, H. Balakrishnan, N. Feamster, T. Koponen, D. Moon, and S. Shenker. Accountable Internet protocol (AIP). In Proceedings of SIGCOMM, Aug 2008.
2. K. Argyraki, P. Maniatis, O. Irzak, S. Ashish, and S. Shenker. Loss and delay accountability for the Internet. In Proc. IEEE International Conference on Network Protocols, Oct. 2007.
3. AS relationships dataset from CAIDA. http://www.caida.org/data/active/as-relationships/index.xml.
4. M. Caesar, L. Subramanian, and R. H. Katz. A case for an Internet health monitoring system. In Proc. USENIX Workshop on Hot Topics in System Dependability, Jun. 2005.
5. J. Chandrashekar, Z.-L. Zhang, and H. Peterson. Fixing BGP, one AS at a time. In Proc. ACM SIGCOMM Network Troubleshooting Workshop, 2004.
6. K. M. Chandy and L. Lamport. Distributed snapshots: Determining global states of distributed systems. ACM Trans. Comput. Syst., 3(1):63-75, 1985.
7. Y.-J. Chi, R. Oliveira, and L. Zhang. Cyclops: the AS-level connectivity observatory. SIGCOMM Comput. Commun. Rev., 38(5):5-16, 2008.
8. N. Feamster and H. Balakrishnan. Detecting BGP configuration faults with static analysis. In Proceedings of NSDI'05, May 2005.
9. N. Feamster, Z. M. Mao, and J. Rexford. BorderGuard: Detecting cold potatoes from peers. In Proc. Internet Measurement Conference, Oct 2004.
10. A. Feldmann, O. Maennel, Z. Mao, A. Berger, and B. Maggs. Locating Internet routing instabilities. In Proc. ACM SIGCOMM, Aug.-Sept. 2004.
11. L. Gao and J. Rexford. Stable Internet routing without global coordination. IEEE/ACM Transactions on Networking, 9(6):681-692, Dec 2001.
12. GNU Zebra. http://www.zebra.org/.
13. G. Goodell, W. Aiello, T. Griffin, J. Ioannidis, P. McDaniel, and A. Rubin. Working around BGP: An incremental approach to improving security and accuracy of interdomain routing. In Proc. Network and Distributed Systems Security, Feb 2003.
14. T. G. Griffin, F. B. Shepherd, and G. Wilfong. The stable paths problem and interdomain routing. IEEE/ACM Transactions on Networking, 10(2):232-243, April 2002.
15. T. G. Griffin and G. Wilfong. A safe path vector protocol. In Proc. INFOCOM, Mar. 2000.
16. A. Haeberlen, P. Kuznetsov, and P. Druschel. The case for Byzantine fault detection. In Proc. HotDep'06. USENIX, Nov 2006.
17. A. Haeberlen, P. Kuznetsov, and P. Druschel. PeerReview: Practical accountability for distributed systems. In Proc. Symposium on Operating Systems Principles, Oct 2007.
18. X. Hu and Z. M. Mao. Accurate real-time identification of IP prefix hijacking. In Proc. IEEE Symposium on Security and Privacy, May 2007.
19. Y.-C. Hu, D. McGrew, A. Perrig, B. Weis, and D. Wendlandt. (R)evolutionary bootstrapping of a global PKI for securing BGP. In Proc. HotNets Workshop, Nov 2006.
20. Y.-C. Hu, A. Perrig, and M. Sirbu. SPV: Secure path vector routing for securing BGP. In Proc. ACM SIGCOMM, 2004.
21. J. Karlin, S. Forrest, and J. Rexford. Autonomous security for autonomous systems. Computer Networks, special issue on Complex Computer and Communication Networks, Oct 2008.
22. S. Kent, C. Lynn, and K. Seo. Secure border gateway protocol (S-BGP). IEEE JSAC, 18(4):582-592, Apr 2000.
23. M. Lad, D. Massey, D. Pei, Y. Wu, B. Zhang, and L. Zhang. PHAS: A prefix hijack alert system. In Proc. USENIX Security Symposium, Aug. 2006.
24. R. Mahajan, D. Wetherall, and T. Anderson. Understanding BGP misconfiguration. In Proc. ACM SIGCOMM, Sep 2002.
25. O. Nordstroem and C. Dovrolis. Beware of BGP attacks. ACM Computer Communications Review (CCR), Apr 2004.
26. C. Partridge, T. Mendez, and W. Milliken. Host anycasting service. RFC 1546, Nov 1993.
27. A. Ramachandran and N. Feamster. Understanding the network-level behavior of spammers. In Proc. ACM SIGCOMM, Sep 2006.
28. Y. Rekhter, T. Li, and S. Hares. A border gateway protocol 4 (BGP-4). RFC 4271, Jan 2006.
29. P. Reynolds, O. Kennedy, E. G. Sirer, and F. B. Schneider. Securing BGP using external security monitors. Technical Report TR-2006-2065, Cornell University, Computing and Information Science, Dec 2006.
30. RouteViews project. http://www.routeviews.org/.
31. J. Scudder, R. Fernando, and S. Stuart. BGP monitoring protocol, Nov 2008. Internet Draft, draft-ietf-grow-bmp-00.
32. R. Teixeira and J. Rexford. A measurement framework for pinpointing routing changes. In Proc. ACM SIGCOMM Network Troubleshooting Workshop, Sep 2004.
33. T. Wan, E. Kranakis, and P. C. van Oorschot. Pretty secure BGP (psBGP). In Proc. Network and Distributed System Security Symposium, Feb 2005.
34. R. White. Securing BGP through secure origin BGP. Internet Protocol Journal, 6(3), 2003.
35. J. Wu, Z. M. Mao, J. Rexford, and J. Wang. Finding a needle in a haystack: Pinpointing significant BGP routing changes in an IP network. In Processings of NSDI'05, May 2005.
36. C. Zheng, L. Ji, D. Pei, J. Wang, and P. Francis. A light-weight distributed scheme for detecting IP prefix hijacks in real-time. In Proc. ACM SIGCOMM, Aug. 2007.
37. E. Zmijewski. Longer is not always better. http://www.renesys.com/blog/2009/02/ longer- is- not- better.shtml.