| Title: |
Rapid detection of BGP anomalies |
| Venue: |
EN413, Level 4, EN Building |
| Abstract: |
The Border Gateway Protocol (BGP) is the Internet's default inter-domain routing protocol that manages connectivity among Autonomous Systems (ASes). BGP was developed at a time when information provided by an AS could be assumed to be accurate. Consequently, it includes few security mechanisms and so is vulnerable to different types of events such as misconfiguration, DoS attacks, and link or node failure. Recent statistics show approximately 20% of the hijacking and misconfigurations lasted less than 10 minutes but were able to pollute 90% of the Internet in less than 2 minutes. Rapid detection of BGP anomalies enables network operators to protect their network from the worst consequence of the anomalous behaviour and mitigates the propagation of BGP anomalies that threaten Internet stability.
This talk summarises the outcomes of 'Rapid detection of BGP anomalies' project which is funded by 'APNIC Internet Operations Research Grant' under the ISIF Asia 2016 grant scheme. The outcomes of the project include Real-time BGP Anomaly Detection Tool (RBADT) and BGP Replay Tool (BRT). RBADT is a tool based on using Recurrence Quantification Analysis (RQA), an advanced nonlinear data analysis method to quantify the number and duration of dynamic systems. BRT is a tool to replay past BGP updates with time-stamps.
This seminar is a trial run for a talk to be presented at APNIC 44 which will be held in Taichung, Taiwan (https://conference.apnic.net/44/). |
| Biography: |
Bahaa has received a B.Eng. and M.Eng. in Computer engineering in 2003 and 2005 respectively, both from the University of Technology, Iraq. He is a lecturer at faculty of engineering, University of Kufa, Iraq. Currently, he is a PhD candidate at the Internet For Things (I4T) Research Lab. |
