Abstract:

Internet Autonomous System (AS) claims the ownership of its IP address blocks by advertising those blocks in routing system. Prefix hijacking occurs when an AS advertises a prefix not of its own. It is known to be rather challenging to detect and confirm prefix hijacking for Border Gateway Protocol (BGP) itself cannot tell the invalid mappings of AS and its announced IP prefixes from those valid ones. This paper proposes and implements a stabilitybased approach to construct reliable ASIP mappings, which are further used in the detection of prefix hijacking. For each ASIP mapping, it first builds a time series according to its liveness in a past time window, and then calculates the stability of this sequence to measure the reliability of this mapping. This method is applied to the data related to several largescale prefix hijacking events. The experiments show that the proposed method can accurately construct ASIP mappings and effectively detect prefix hijacking events.

Key words: border gateway protocol, reliability, declaring relationship, prefix hijacking