Detecting AS hijacking in one administrative domain

Due to the inherent design faults of the Border Gateway Protocol (BGP), BGP prefix hijacking remains a serious security threat to the Internet routing system. AS hijacking enables an attacker to pass the prefix ownership validation mechanism, it is more sophisticated than IP prefix hijacking. So far, many efforts have been done on the detection of prefix hijacking, however, AS hijacking has not received enough attention. This paper presents a system that is capable of detecting AS hijacking inside one administrative domain before they pollute a large number of external Autonomous Systems (ASes) on the Internet. Experiment results show that our proposed system can detect AS hijacking attacks with high accuracy and low detection latency. Furthermore, it is suitable for incremental deployment.