On the classification and false alarm of invalid prefixes in RPKI based BGP route origin validation

被引：0

作者：

Xu, Wenjie ^{[1
]}

Chang, Deliang ^{[1
]}

Li, Xing ^{[1
]}

机构：

[1] Tsinghua Univ, Dept Elect Engn, Beijing, Peoples R China

来源：

2019 IFIP/IEEE SYMPOSIUM ON INTEGRATED NETWORK AND SERVICE MANAGEMENT (IM) | 2019年

关键词：

BGP; RPKI; ROV;

D O I：

暂无

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

BGP is the default inter- domain routing protocol in today's Internet, but has serious security vulnerabilities [1]. One of them is (sub) prefix hijacking. IETF standardizes RPKI to validate the AS origin but RPKI has a lot of problems [2] [3] [4] [5], among which is potential false alarm. Although some previous work [4] [2] points it out explicitly or implicitly, further measurement and analysis remain to be done. Our work measures and analyzes the invalid prefixes systematically. We first classify the invalid prefixes into six different types and then analyze their stability. We show that a large proportion of the invalid prefixes very likely result from traffic engineering, IP address transfer and failing to aggregate rather than real hijackings.

引用

页码：654 / 658

页数：5