Internet Routing Anomaly Detection and Visualization

Abstract

An IP prefix (i.e., a block of IP addresses) can be subject to many types of routing anomalies. One of the most infamous of such anomalies is prefix hijacking, in which an attacker hijacks traffic meant to reach the legitimate user of a prefix. Route leaks is another common type of prefix anomaly, in which a misconfigured ISP advertises illegitimate routes for prefixes. These anomalies threaten every prefix on the Internet, whether commercial or private. Unfortunately, it is unlikely that these prefix anomalies will be resolved in the near future.

Date
Links