Title: Detecting BGP Routing Anomalies

The cost of Internet shutdowns is increasing as malicious actors target countries and other high profile organizations. Every week we hear about major cyber-attacks or data breaches that jeopardize the privacy and financial well-being of millions of online users, or cyber war crimes of espionage that put entire societies in danger. The threat of cyber-attack pervades nearly every type of industry and institution that relies on the Internet for networked communication, and the threat will continue to increase in the future. Routing anomalies caused by both misconfigurations and malicious intent have tested the resilience of Internet core protocols. During this talk I will present our method for detecting BGP routing anomalies.  Our research shows that BGP announcements that are associated with disruptive updates tend to occur in groups of relatively high frequency, followed by periods of infrequent activity. Our results show that the burstiness and volume of these announcements have the potential to provide early warnings of prefix highjacks.

Please contact Molly Kruko @ mkruko@mit.edu for the Zoom login information.