Topology-Based Detection of Anomalous BGP Messages

摘要: The Border Gateway Protocol (BGP) is a fundamental component of the current Internet infrastructure. Due to inherent trust relationship between peers, control BGP router could enable an attacker redirect traffic allowing man-in-the-middle attacks or launch large-scale denial service. It known that has weaknesses are protocol design. Many solutions these have been proposed, but most require resource intensive cryptographic operations and modifications existing software. For this reason, none them widely adopted. However, threat necessitates effective, immediate solution.