[go: up one dir, main page]

Moriano et al., 2019 - Google Patents

Using bursty announcements for early detection of BGP routing anomalies

Moriano et al., 2019

View PDF
Document ID
15291932997172019494
Author
Moriano P
Hill R
Camp L
Publication year
Publication venue
arXiv preprint arXiv:1905.05835

External Links

Snippet

Despite the robust structure of the Internet, it is still susceptible to disruptive routing updates that prevent network traffic from reaching its destination. In this work, we propose a method for early detection of large-scale disruptions based on the analysis of bursty BGP …
Continue reading at www.researchgate.net (PDF) (other versions)

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance or administration or management of packet switching networks
    • H04L41/06—Arrangements for maintenance or administration or management of packet switching networks involving management of faults or events or alarms
    • H04L41/0654—Network fault recovery
    • H04L41/0659—Network fault recovery by isolating the faulty entity
    • H04L41/0663—Network fault recovery by isolating the faulty entity involving offline failover planning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1458—Denial of Service
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/145—Countermeasures against malicious traffic the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing packet switching networks
    • H04L43/02—Arrangements for monitoring or testing packet switching networks involving a reduction of monitoring data
    • H04L43/026—Arrangements for monitoring or testing packet switching networks involving a reduction of monitoring data using flow generation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance or administration or management of packet switching networks
    • H04L41/06—Arrangements for maintenance or administration or management of packet switching networks involving management of faults or events or alarms
    • H04L41/0631—Alarm or event or notifications correlation; Root cause analysis
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing packet switching networks
    • H04L43/08—Monitoring based on specific metrics
    • H04L43/0805—Availability
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/02—Details
    • H04L12/26—Monitoring arrangements; Testing arrangements
    • H04L12/2602—Monitoring arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing packet switching networks
    • H04L43/08—Monitoring based on specific metrics
    • H04L43/0823—Errors
    • H04L43/0847—Transmission error
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance or administration or management of packet switching networks
    • H04L41/06—Arrangements for maintenance or administration or management of packet switching networks involving management of faults or events or alarms
    • H04L41/0677—Arrangements for maintenance or administration or management of packet switching networks involving management of faults or events or alarms localization of fault position
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing packet switching networks
    • H04L43/10—Arrangements for monitoring or testing packet switching networks using active monitoring, e.g. heartbeat protocols, polling, ping, trace-route
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance or administration or management of packet switching networks
    • H04L41/06—Arrangements for maintenance or administration or management of packet switching networks involving management of faults or events or alarms
    • H04L41/0604—Alarm or event filtering, e.g. for reduction of information
    • H04L41/0613—Alarm or event filtering, e.g. for reduction of information based on the type or category of the network elements

Similar Documents

Publication Publication Date Title
Ballani et al. A study of prefix hijacking and interception in the Internet
Zheng et al. A light-weight distributed scheme for detecting IP prefix hijacks in real-time
Zirngibl et al. Rusty clusters? Dusting an IPv6 research foundation
McCoy et al. Shining light in dark places: Understanding the Tor network
Hu et al. Accurate real-time identification of IP prefix hijacking
Lad et al. PHAS: A Prefix Hijack Alert System.
Dainotti et al. Estimating internet address space usage through passive measurements
Anderson Dimming the Internet: Detecting throttling as a mechanism of censorship in Iran
Moura et al. How dynamic is the isps address space? towards internet-wide dhcp churn estimation
Beverly et al. Measuring and characterizing IPv6 router availability
US9596321B2 (en) Server grouping system
Dai et al. Smap: Internet-wide scanning for spoofing
Lone et al. Saving the internet: Explaining the adoption of source address validation by internet service providers
Tian et al. An incrementally deployable flow-based scheme for IP traceback
Vaarandi Detecting anomalous network traffic in organizational private networks
Hiran et al. Crowd-based detection of routing anomalies on the internet
Molina et al. Operational experiences with anomaly detection in backbone networks
Schulmann et al. Insights into SAV Implementations in the Internet
Moriano et al. Using bursty announcements for early detection of BGP routing anomalies
Vervier et al. SpamTracer: How stealthy are spammers?
Anderson et al. Global network interference detection over the {RIPE} atlas network
Wong et al. An efficient distributed algorithm to identify and traceback ddos traffic
Anbar et al. Statistical cross-relation approach for detecting TCP and UDP random and sequential network scanning (SCANS)
Kumar et al. Smart Meter Performance Under Wired and Wireless Cyber Security Attack
SMH Real-time implementation of IoT enabled cyber attack detection system (IoT-E-CADS) in advanced metering infrastructure (AMI) using machine learning technique (MLT)