Withdrawing the BGP Re-Routing Curtain: Understanding the Security Impact of BGP Poisoning through Real-World Measurements
Jared M. Smith, Kyle Birkeland, Tyler McDaniel, Max Schuchard · 2020
In particular, research has begun to harness the de facto routing protocol on the Internet, the Border Gateway Protocol (BGP) [44] and the functionality it provides to implement new offensive, defensive, and analytical systems.Growing in use, a method known as BGP poisoning has been leveraged by censorship circumvention, DDoS defense, and topology discovery.Rooted in the BGP RFC, BGP poisoning can be used by routing-capable entities.These entities are known on the Internet as Autonomous Systems, or ASes [16].Fundamentally, BGP poisoning is now being used to maneuver an ASes' return traffic around specific AS-to-AS links, new regions of the Internet topology previously not visible to certain ASes, and other regions of interest.Critically, BGP poisoning and the re-routing it provides is being employed for security purposes.