Detecting and recovering prefix hijacking using multi-agent inter-AS diagnostic system

Abstract

The Internet is a collection of autonomous systems (ASes), and each AS exchanges routing information with neighboring ASes using the Border Gateway Protocol (BGP). Prefix hijacking is a representative example of communication failure caused by wrong routing information exchange. When an AS's prefix is hijacked by invalid BGP routing information advertisement from another AS, the hijacked AS cannot communicate with other ASes because the traffic is delivered to the hijacking AS, not to the hijacked AS. To solve this problem, we have been researching and developing technologies that detect, recover, and prevent prefix hijacking. In this paper, we focus on detection and recovery functions. We propose two detection techniques using ping tests and checking AS_PATH change to improve the accuracy of prefix hijacking detection. For the recovery function, we propose two methods to reduce the downtime of communication failure: retaking the hijacked prefix and preventing distribution of the hijacked prefix.