Seminars INGI - June 19 at 1:00-2:00 p.m

Expanding BGP Data Horizons by Prof Cristel Pelsser (ICTEAM)

BGP data collection platforms as currently architected face fundamental challenges that threaten their long-term sustainability: their data comes with enormous redundancy and yet dangerous visibility gaps. GILL is a new BGP routes collection platform that can collect routes from at least an order of magnitude more routers compared to existing platforms while limiting the increase in human effort and data volume.  GILL’s key principle is an overshoot-and-discard collection scheme: Any AS can easily peer with GILL and export their routes. GILL offers a lossy compression algorithm that only stores the nonredundant routes as well as lossless compression leveraging redundancy in BGP attributes, in our new bgproutes.io  platform. Our new mode of data selection and delivery enables to improve BGP data analysis such as topology mapping, AS ranking, and forged origin hijack detection.

We have built such a detector. DFOH is a system designed to detect forged-origin hijacks across the entire Internet. Forged-origin hijacks are typically malicious BGP hijacks where attackers manipulate the AS path of BGP messages to make them appear as legitimate routing updates. DFOH is particularly useful because the proposed BGP extensions for cryptographically verifying the validity of AS paths (e.g., BGPSec or ASPA) are challenging to deploy widely. With DFOH, operators can quickly and confidently determine when their traffic is being hijacked.