Telecommunications Science ›› 2021, Vol. 37 ›› Issue (12): 110-120.doi: 10.11959/j.issn.1000-0801.2021263

• Engineering and Application • Previous Articles     Next Articles

Architecture and practice of BGP internet routing visibility and security detection

Chaoyang YE1, Chen SHEN2, Mingqing HUANG3, Shicong ZHANG1, Yisha LIU1   

  1. 1 National (Hangzhou) New-Type Internet Exchange Point, Zhejiang 311200, China
    2 China Academy of Information and Communications Technology, Beijing 100191, China
    3 Huawei Technologies Co., Ltd., Beijing 100095, China
  • Revised:2021-12-08 Online:2021-12-20 Published:2021-12-01

Abstract:

Border Gateway Protocol (BGP) is the de facto inter-domain routing protocol of today’s global internet for exchanging routing information.However, it was supposed that all participants were reliable without generating routing security issues by mistakes or on purpose when BGP was designed 50 years ago.As Internet is getting involved in all aspects of our society, internet routing security is becoming the problems that couldn’t be ignored anymore.A general architecture was proposed which coved inference of BGP routing knowledge database and provided visibility of global internet routing.Detection of route security events such as routing hijacks and routing leaks were realized.The deployment shows that the system can provide good visibility of internet routing and precise detection of routing security events.

Key words: BGP, internet routing security, routing hijack, routing leak

CLC Number: 

No Suggested Reading articles found!