Global Internet Routing Forensics

Abstract

The Border Gateway Protocol (BGP), the Internet's global routing pro- tocol, lacks basic authentication and monitoring functionality. Thus, false routing information can be introduced into the Internet, which can cause the total collapse of packet forwarding and lead to denial-of-service or misdirected traffic. While it may be impossible to prevent such an attack, we seek to provide the routing infrastructure with a mechanism for identifying false paths through efficient validation, proper recording and forensic analysis of routing data. Towards this end, we propose a novel BGP path verification technique using ICMP traceback messages that has been extended to include AS-PATH and link connectivity in- formation. The approach can be easily deployed as it does not require modifications to BGP.