计算机与现代化Issue(11):93-96,161,5.DOI:10.3969/j.issn.1006-2475.2011.11.025
基于稳定度的可信AS-IP宣告关系构建方法
Stability-based Reliable AS-IP Mapping Construction Method
摘要
Abstract
Internet Autonomous System ( AS) claims the ownership of its IP address blocks by advertising those blocks in routing system. Prefix hijacking occurs when an AS advertises a prefix not of its own. It is known to be rather challenging to detect and confirm prefix hijacking for Border Gateway Protocol ( BCP) itself cannot tell the invalid mappings of AS and its announced IP prefixes from those valid ones. This paper proposes and implements a stability-based approach to construct reliable AS-IP mappings, which are further used in the detection of prefix hijacking. For each AS-IP mapping, it first builds a time series according to its liveness in a past time window, and then calculates the stability of this sequence to measure the reliability of this mapping. This method is applied to the data related to several large-scale prefix hijacking events. The experiments show that the proposed method can accurately construct AS-IP mappings and effectively detect prefix hijacking events.关键词
边界网关协议/信度/宣告关系/前缀劫持Key words
border gateway protocol/reliability/declaring relationship/prefix hijacking分类
信息技术与安全科学引用本文复制引用
燕强,王小强,蔡开裕,朱培栋..基于稳定度的可信AS-IP宣告关系构建方法[J].计算机与现代化,2011,(11):93-96,161,5.基金项目
国家自然科学基金资助项目(60873214) (60873214)