2009 BGPLensPatternsandAnomaliesinIn

• (Prakash et al., 2009) ⇒ B. Aditya Prakash, Nicholas Valler, David Andersen, Michalis Faloutsos, and Christos Faloutsos. (2009). “BGP-lens: Patterns and Anomalies in Internet Routing Updates.” In: Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD-2009). doi:10.1145/1557019.1557160

Subject Headings:

Notes

• Categories and Subject Descriptors: H.2.8 Database Management: Database Applications — Data Mining.
• General Terms: Algorithms, Measurement, Security

Cited By

• http://scholar.google.com/scholar?q=%22BGP-lens%3A+patterns+and+anomalies+in+internet+routing+updates%22+2009
• http://portal.acm.org/citation.cfm?doid=1557019.1557160&preflayout=flat#citedby

Quotes

Author Keywords

BGP Monitoring, Anomalies, Patterns, Self-similarity

Abstract

The Border Gateway Protocol (BGP) is one of the fundamental computer communication protocols. Monitoring and mining BGP update messages can directly reveal the health and stability of Internet routing. Here we make two contributions : firstly we find patterns in BGP updates, like self-similarity, power-law and lognormal marginals; secondly using these patterns, we find anomalies. Specifically, we develop BGP-lens, an automated BGP updates analysis tool, that has three desirable properties : (a) It is effective, able to identify phenomena that would otherwise go unnoticed, such as a peculiar “clothesline” behavior or prolonged “spikes” that last as long as 8 hours; (b) It is scalable, using algorithms are all linear on the number of time-ticks; and (c) It is admin-friendly, giving useful leads for phenomenon of interest.

We showcase the capabilities of BGP-lens by identifying surprising phenomena verified by syadmins, over a massive trace of BGP updates spanning 2 years, from the publicly available site http://datapository.net.

References

,

	Author	volume	Date Value	title	type	journal	titleUrl	doi	note	year
2009 BGPLensPatternsandAnomaliesinIn	B. Aditya Prakash Nicholas Valler David Andersen Michalis Faloutsos Christos Faloutsos			BGP-lens: Patterns and Anomalies in Internet Routing Updates		KDD-2009 Proceedings		10.1145/1557019.1557160		2009