Detecting forged AS paths from BGP graph features using Recurrent Neural Networks - Archive ouverte HAL Access content directly
Conference Papers Year :

Detecting forged AS paths from BGP graph features using Recurrent Neural Networks

Abstract

The Border Gateway Protocol (BGP) is in charge of the route exchange at the Internet scale. Anomalies in BGP can have several causes (misconfigurations, outages and attacks). Forged AS paths are small scale and subtle attacks on BGP and therefore are hard to detect. In this paper we use a Machine Learning (ML) model applying a Long Short-Term Memory (LSTM) based Recurrent Neural Network (RNN) architecture to take the temporal aspect of BGP into account. We show that our ML model is able to detect forged AS path anomalies with an accuracy of 67% and a precision of 72%. These preliminary results outperform the existing proposals and allow us to think that ML on temporal graphs is worth investigating.
Fichier principal
Vignette du fichier
LSTM_BGP_CCNC.pdf (151.03 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03610677 , version 1 (16-03-2022)

Identifiers

Cite

Kevin Hoarau, Pierre Ugo Tournoux, Tahiry Razafindralambo. Detecting forged AS paths from BGP graph features using Recurrent Neural Networks. 2022 IEEE 19th Annual Consumer Communications & Networking Conference (CCNC), Jan 2022, Las Vegas, United States. pp.735-736, ⟨10.1109/CCNC49033.2022.9700668⟩. ⟨hal-03610677⟩
42 View
112 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More