RouteWatcher: Monitorando e Verificando Rotas na Internet
Resumo
O BGP, protocolo de roteamento interdomínio na Internet, não possui funcionalidades nativas de prevenção de erros como vazamento de rotas ou ataques como sequestro de prefixos. Esta limitação pode comprometer a robustez da Internet contra falhas de enlace, deteriorar o desempenho de sistemas distribuídos, e levar a perda de conectividade. Para auxiliar pesquisadores e operadores de rede a superarem estes desafios, apresentamos o RouteWatcher: uma ferramenta que monitora e valida rotas na Internet de acordo com inferências baseadas em um modelo de roteamento. O RouteWatcher integra múltiplas fontes de dados em uma interface Web que permite pesquisadores e operadores identificarem e analisarem anomalias de roteamento.
Referências
Gao, L. (2001). On inferring autonomous system relationships in the internet. IEEE/ACM Trans. Netw., 9(6):733–745.
Giotsas, V., Luckie, M., Huffaker, B., and claffy, k. (2014). Inferring complex as relationships. In IMC 2014.
Goodin, D. (2017). Russian-controlled telecom hijacks financial services' Internet traffic. ARS Technica, bit.ly/2JqRZCe.
IIT-CNR (2019). Isolario Project. www.isolario.it.
Jin, Y., Scott, C., Dhamdhere, A., Giotsas, V., Krishnamurthy, A., and Shenker, S. (2019). Stable and practical AS relationship inference with ProbLink. In NSDI.
Lad, M., Massey, D., Pei, D., Wu, Y., Zhang, B., and Zhang, L. (2006). Phas: A prefix hijack alert system. In USENIX Security Symposium 2006.
Luckie, M., Huffaker, B., Dhamdhere, A., Giotsas, V., and claffy, k. (2013). As relationships, customer cones, and validation. In IMC 2013.
Memoria, F. (2019). Hackers Hijack Major UK Supermarket's Twitter Account to Promote Bitcoin Scam. Crypto Globe, bit.ly/2G7qagb.
RIPE NCC (2019). Routing Information Service. bit.ly/2NNZbwn.
Route Views (2019). University of Oregon Route Views Project. www.routeviews.org.
Siddiqui, M. S., Montero, D., Yannuzzi, M., Serral-Gracià, R., and Masip-Bruin, X. (2014). Route leak identification: A step toward making inter-domain routing more reliable. In DRCN 2014.
Strickx, T. (2019). How Verizon and a BGP Optimizer Knocked Large Parts of the Internet Offline Today. Cloudflare blog, bit.ly/2SbZbFc.
Zhang, Z., Zhang, Y., Hu, Y. C., Mao, Z. M., and Bush, R. (2010). iSPY: Detecting ip prefix hijacking on my own. IEEE/ACM Trans. Netw., 18(6):1815–1828.
Zheng, C., Ji, L., Pei, D., Wang, J., and Francis, P. (2007). A light-weight distributed scheme for detecting ip prefix hijacks in real-time. In SIGCOMM 2007.
Giotsas, V., Luckie, M., Huffaker, B., and claffy, k. (2014). Inferring complex as relationships. In IMC 2014.
Goodin, D. (2017). Russian-controlled telecom hijacks financial services' Internet traffic. ARS Technica, bit.ly/2JqRZCe.
IIT-CNR (2019). Isolario Project. www.isolario.it.
Jin, Y., Scott, C., Dhamdhere, A., Giotsas, V., Krishnamurthy, A., and Shenker, S. (2019). Stable and practical AS relationship inference with ProbLink. In NSDI.
Lad, M., Massey, D., Pei, D., Wu, Y., Zhang, B., and Zhang, L. (2006). Phas: A prefix hijack alert system. In USENIX Security Symposium 2006.
Luckie, M., Huffaker, B., Dhamdhere, A., Giotsas, V., and claffy, k. (2013). As relationships, customer cones, and validation. In IMC 2013.
Memoria, F. (2019). Hackers Hijack Major UK Supermarket's Twitter Account to Promote Bitcoin Scam. Crypto Globe, bit.ly/2G7qagb.
RIPE NCC (2019). Routing Information Service. bit.ly/2NNZbwn.
Route Views (2019). University of Oregon Route Views Project. www.routeviews.org.
Siddiqui, M. S., Montero, D., Yannuzzi, M., Serral-Gracià, R., and Masip-Bruin, X. (2014). Route leak identification: A step toward making inter-domain routing more reliable. In DRCN 2014.
Strickx, T. (2019). How Verizon and a BGP Optimizer Knocked Large Parts of the Internet Offline Today. Cloudflare blog, bit.ly/2SbZbFc.
Zhang, Z., Zhang, Y., Hu, Y. C., Mao, Z. M., and Bush, R. (2010). iSPY: Detecting ip prefix hijacking on my own. IEEE/ACM Trans. Netw., 18(6):1815–1828.
Zheng, C., Ji, L., Pei, D., Wang, J., and Francis, P. (2007). A light-weight distributed scheme for detecting ip prefix hijacks in real-time. In SIGCOMM 2007.
Publicado
02/09/2019
Como Citar
BARSAND, Lucas; TAGLIAFERRI, Giovanni; CUNHA, Ítalo.
RouteWatcher: Monitorando e Verificando Rotas na Internet. In: SALÃO DE FERRAMENTAS - SIMPÓSIO BRASILEIRO DE SEGURANÇA DA INFORMAÇÃO E DE SISTEMAS COMPUTACIONAIS (SBSEG), 19. , 2019, São Paulo.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2019
.
p. 11-18.
DOI: https://doi.org/10.5753/sbseg_estendido.2019.13999.
