BGP anomaly detection - a path-based apporach
Chang Rong Yang, Wenli Jia · 2023
The Border Gateway Protocol (BGP) is a routing protocol used to exchange routing information between autonomous systems. The decentralized nature of inter-networks makes them more vulnerable to BGP hijacking attacks, which maliciously modify BGP routes, potentially intercepting sensitive data and causing disruptions to services. In this paper, we proposed a novel path-based routing anomaly detection algorithm that combines both attributes and topological information from BGP routing tables to accurately identify anomalies and protect against BGP hijacking. The algorithm introduces a random walk path sampling and modeling method that effectively captures the underlying structure of the routing table.