基于国际视图的域间路由异常监测

Inter-Domain Routing Monitoring Approach Based on International View

域间路由安全监测方案由于部署方便和系统整体开销较小,在增强路由系统安全性方面得到了广泛应用。文章针对目前国内的监测方案在感知国内互联网路由安全态势方面的不足,提出基于国际视图的监测方法,并设计了相应的异常监测算法。异常监测算法包括国家级非法宣告前缀异常监测算法和国家级多源冲突异常监测算法。这是对目前监测方案的有力补充。该方法可以有效监测到国外AS对国内路由的劫持;同时评估国内非法宣告前缀对整个Internet的影响和在整个Internet上的扩散情况。

The inter-domain routing security monitoring system has been widely applied in enhancing the security of routing system,for the advantage of deployment and light overall system load.For the deficiencies of current approaches in perceiving domestic routing security state,integrated multiple route views from both domestic and foreign route information,and designed corresponding anomaly detection algorithms.Anomaly detection algorithms,includes the state-level illegal declaration of the prefix algorithm and the state-level multiple origin AS conflicts algorithm.By utilizing international route views,the approach can protect domestic routing system by perceiving hijacks originated from foreign ASs,and restrict domestic ASs from spreading illegal route announcements to foreign countries.