• DocumentCode
    3441176
  • Title

    ROUSSEAU: A Monitoring System for Inter-domain Routing Security

  • Author

    Deng, Wenping ; Zhu, Peidong ; Lu, Xicheng

  • Author_Institution
    Sch. of Comput., Nat. Univ. of Defense Technol., Changsha
  • fYear
    2008
  • fDate
    5-8 May 2008
  • Firstpage
    255
  • Lastpage
    262
  • Abstract
    The current implementation of BGP protocol has a variety of vulnerabilities and weakness. Monitoring BGP´s behavior is an effective way of improving the security of inter-domain routing. In this paper, a monitoring system for inter-domain routing security is presented. As for BGP routing table anomaly detection, an in-depth approach based on anomaly detection rules is designed; As for BGP UPDATE message anomaly detection, a real-time detection method is devised. By applying an improved spring-magnetic topological layout algorithm to the network topology display, our monitoring system provides a successful visualization for the detection results. The feasibility and validity of the monitoring approach are demonstrated by the detailed description of the final results analysis.
  • Keywords
    routing protocols; telecommunication network topology; telecommunication security; BGP UPDATE message anomaly detection; BGP protocol; BGP routing table anomaly detection; ROUSSEAU; anomaly detection rules; border gateway protocol; inter-domain routing security; monitoring system; network topology display; real-time detection method; spring-magnetic topological layout algorithm; Communication networks; Communication system security; Computer crashes; Computer networks; Computer security; Computerized monitoring; Internet; National security; Routing protocols; Visualization; Autonomous System; BGP; Inter-domain Routing; Security Monitoring; Visualization;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Communication Networks and Services Research Conference, 2008. CNSR 2008. 6th Annual
  • Conference_Location
    Halifax, NS
  • Print_ISBN
    978-0-7695-3135-9
  • Type

    conf

  • DOI
    10.1109/CNSR.2008.65
  • Filename
    4519867