Practicable route leak detection and protection with ASIRIA

Route leak events have historically caused many wide-scale disruptions on the Internet. Leaks are particularly hard to detect because they most frequently involve routes with legitimate origin announced through legitimate paths that are propagated beyond their legitimate scope. In this paper we pres...

Full description

Saved in:
Bibliographic Details
Published inComputer networks (Amsterdam, Netherlands : 1999) Vol. 211; p. 108966
Main Authors Bagnulo, Marcelo, García-Martínez, Alberto, Angieri, Stefano, Lutu, Andra, Yang, Jinze
Format Journal Article
LanguageEnglish
Published Amsterdam Elsevier B.V 05.07.2022
Elsevier Sequoia S.A
Subjects
BGP security
Internet
Leak detection
Leakage
Leaks
Route leaks
Routing (telecommunications)
Routing registries
BGP security
Routing registries
Route leaks
Online AccessGet full text

Cover

More Information
Summary:Route leak events have historically caused many wide-scale disruptions on the Internet. Leaks are particularly hard to detect because they most frequently involve routes with legitimate origin announced through legitimate paths that are propagated beyond their legitimate scope. In this paper we present ASIRIA, a mechanism for detecting and avoiding leaked routes and protecting against leakage events that uses AS relationship information inferred from the Internet Routing Registries. By relying on existing information, ASIRIA provides immediate benefits to early adopters. In particular, we consider the deployment of ASIRIA to detect leaks caused by over 300 ASes and we show that it can detect over 99% of the leakage events generated by a customer or a peer solely using currently available information in 90% of the cases.
ISSN:1389-1286
1872-7069
DOI:10.1016/j.comnet.2022.108966