Research And Implementation Of Outsourcing Mitigation Mechanism For BGP Prefix Hijacking

The Internet is composed of different autonomous systems(AS).The quantity of AS is growing with the development of the Internet.As the only protocol widely used in inter-domain routing,Border Gateway Protocol(BGP)plays a crucial role in the Internet.Since the BGP protocol did not consider the security verification of control message in the design,the inter-domain routing system is vulnerable to attacks.Prefix hijacking is one of the top security threats for BGP inter-domain routing.For prefix hijacking,this topic studies outsourcing mitigation mechanism with multiple origin AS to mitigate or even eliminate the impact of prefix hijacking events.Outsourcing mitigation is the process in which the mitigation AS announcing the hijacked prefix attracts the hijacked traffic and redirects it to the legitimate AS.In this process,this topic proposes a selection strategy for mitigation AS based on multiple dimensions in order to maximize the effecttiveness of outsourcing mitigation.This strategy selects the mitigation AS by analyzing the AS topology on different dimensions:the hierarchical type of the AS,the Internet Exchange Point(IXP)of the AS access,and the neighbor connection of the AS.According to the above-metioned research on the selection strategy for mitigation AS,this topic designs and implements a system using outsourcing mitigation against BGP prefix hijacking.The architecture of this system consists of three layers:infrastructure layer,processing logic layer,and user interaction layer.The results of test experiments show that this system can automatically execute mitigation strategies triggered by prefix hijacking events and effectively reduces the impact of prefix hijacking.