Detecting forged AS paths from BGP graph features using Recurrent Neural Networks - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

Detecting forged AS paths from BGP graph features using Recurrent Neural Networks

Résumé

The Border Gateway Protocol (BGP) is in charge of the route exchange at the Internet scale. Anomalies in BGP can have several causes (misconfigurations, outages and attacks). Forged AS paths are small scale and subtle attacks on BGP and therefore are hard to detect. In this paper we use a Machine Learning (ML) model applying a Long Short-Term Memory (LSTM) based Recurrent Neural Network (RNN) architecture to take the temporal aspect of BGP into account. We show that our ML model is able to detect forged AS path anomalies with an accuracy of 67% and a precision of 72%. These preliminary results outperform the existing proposals and allow us to think that ML on temporal graphs is worth investigating.
Fichier principal
Vignette du fichier
LSTM_BGP_CCNC.pdf (151.03 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03610677 , version 1 (16-03-2022)

Identifiants

Citer

Kevin Hoarau, Pierre Ugo Tournoux, Tahiry Razafindralambo. Detecting forged AS paths from BGP graph features using Recurrent Neural Networks. 2022 IEEE 19th Annual Consumer Communications & Networking Conference (CCNC), Jan 2022, Las Vegas, United States. pp.735-736, ⟨10.1109/CCNC49033.2022.9700668⟩. ⟨hal-03610677⟩
50 Consultations
159 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More