Detecting Prefix Hijackings in the Internet with Argus英语教案.pdf

Detecting Prefix Hijackings in the Internet with Argus Xingang Shi†§ Yang Xiang‡§ Zhiliang Wang†§ shixg@ sharangxy@ wzl@ Xia Yin‡§ Jianping Wu†‡§ yxia@ jianping@ † Institute for Network Sciences and Cyberspace, Tsinghua University ‡ Department of Computer Science Technology, Tsinghua University §Tsinghua National Laboratory for Information Science and Technology (TNList) ABSTRACT 1. INTRODUCTION Border Gateway Protocol (BGP) plays a critical role in the The Internet is composed of tens of thousands of Au- Internet inter-domain routing reliability. Invalid routes gen- tonomous Systems (ASes) which operate individual parts of erated by mis-configurations or forged by malicious attacks the infrastructure. As Border Gateway Protocol (BGP) [27] may hijack the traffic and devastate the Internet routing sys- controls the packet forwarding path between ASes, it plays tem, but it is unlikely that a secure BGP can be deployed in a critical role in the efficiency and reliability of the Inter- the near future to completely prevent them. Although many net. However, because of the lack of security considerations, hijacking detection systems have been developed, they more several BGP security problems have not been well resolved or less have weaknesses such as long detection delay, high yet [25]. For example, the route information received from false alarm rate and deployment difficulty, and no