Detection, Classification, and Analysis of Inter-Domain Traffic - PowerPoint PPT Presentation

�� Detection, Classification, and Analysis of Inter-Domain Traffic with Spoofed Source IP Addresses @Internet Measurement Conference ’17, London

Introduction

� �� The Unsolved Spoofing Problem Need for insights about qualitative and quantitative characteristics of spoofed traffic and AS level spoofability

� Detecting Spoofed Traffic is Hard... ? ? SRC IP: 149.10.4.2 How do we decide if a given packet has a spoofed source IP address?

� Overview

�� Contributions �� passive ��

Identifying Spoofed Traffic

What we want to uncover... not of the interface of the sending host � Feature we can leverage... �� Classifying IP Source Addresses

Feature we can leverage... �� Classifying IP Source Addresses What we want to uncover... not of the interface of the sending host �

�� Classifying IP Source Addresses What we want to uncover... not of the interface of the sending host � Feature we can leverage...

�� Things We Should Never See on the Internet: Bogon Bogon IPv4 space routable bogon (86.2%) (13.8%)

� �� Things We Should Never See on the Internet: Unrouted Unrouted IPv4 space routable bogon (86.2%) (13.8%) unrouted (18.1%) AS agnostic �� not ��

�� valid source � valid prefixes per AS � � � �� Who is Allowed to Send What? IPv4 space routable bogon (86.2%) (13.8%) routed (68.1%) unrouted invalid valid (18.1%) AS agnostic AS speci fi c

valid prefixes per AS � � � �� Who is Allowed to Send What? IPv4 space routable bogon (86.2%) (13.8%) routed (68.1%) unrouted invalid valid (18.1%) �� valid source � AS agnostic AS speci fi c

� � �� Who is Allowed to Send What? IPv4 space routable bogon (86.2%) (13.8%) routed (68.1%) unrouted invalid valid (18.1%) �� valid source � AS agnostic AS speci fi c valid prefixes per AS �

� Identifying Invalid: Legitimate IP Address Space per AS other ASes Public Internet AS C AS A AS B AS D

�� Identifying Invalid: Legitimate IP Address Space per AS other ASes p1, p2 Public Internet AS C AS A AS A announcing prefixes p1 and p2 to the other ASes AS B AS D Announcement Assumption � ��

�� Identifying Invalid: Legitimate IP Address Space per AS other ASes p1, p2 Public Internet AS C AS A AS A announcing prefixes p1 and p2 p1 to the other ASes p2 ... AS B List of valid prefixes for AS A AS D Announcement

Detection, Classification, and Analysis of Inter-Domain Traffic - PowerPoint PPT Presentation

A Reproducibility Study of IP Spoofing Detection in Inter-Domain Traffic Jasper Eumann

A Reproducibility Study of IP Spoofing Detection in Inter-Domain Traffic Jasper Eumann,

1 Inter-Domain Routing Network comprised of many Autonomous Systems (ASes) or domains 23

Inter-Domain DOTS Use Cases draft-nishizuka-dots-inter-domain-usecases-00 Kaname Nishizuka, NTT

How NOC manages and controls inter-domain traffic? 5 th tf-noc meeting, Dubrovnik

Analysis and evaluation of classification models for disease detection using human gut

CCECE 2003 Signal Classification through Multifractal Analysis and Complex Domain Neural

CS 557 Inter-Domain Routing Introduction to BGP Routing Tutorial slides from Tim Griffin, 2001

Bootstrapping evolvability for inter-domain routing with D-BGP Raja Sambasivan David Tran-Lam,

An Analysis of Domain Classification Services Pelayo Vallina, Victor Le Pochat, lvaro Feal,

Inter-Domain Routing Security Inter-Domain Routing Security ~ ~BGP BGP Route Hijacking~ Route

From image classification to object detection Image classification Object detection Image source

shot boundary detection combining similarity analysis and classification Matthew Cooper 1 , Ting

Bootstrapping evolvability for inter-domain routing Raja Sambasivan , David Tran-Lam, Aditya

Inter-Domain Lies Based on TMA 2019 Paper - Focus on Infrastructure Julian M. Del Fiore Pascal

Classification And Novel Class Detection ISIC Skin Image Analysis Workshop, June 15 th , 2020

Overview of the Impact of Body Cameras on the Operations and Workload of Commonwealths

PROPOSED OECD CHANGES RELATED TO INTERNATIONAL TRANSPORT Jacques Sasseville OECD Tax Treaty Unit

Ambleside Boat Launch Closure Ramp to Close by December 31, 2016 District of West Vancouver

PROJECT OVERVIEW Spanish Springs - Reno, NV PROJECT OVERVIEW REQUES T: To approve a tentative

The Spoofer Project Inferring the Extent of Source Address Filtering on the Internet Rob Beverly

3 Org Structure Politicians IT Network Structure 5 History of projects between

Being a good Netizen GRNOG 9 December 6 2019 Antonis Lioumis GRNET/NOC National

Cebu - Shelter Cluster Meeting 14:00, Dec 13, 2013 Shelter Cluster Philippines