Feature Extraction and Visual Feature Fusion for the Detection of Concurrent Prefix Hijacks - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Feature Extraction and Visual Feature Fusion for the Detection of Concurrent Prefix Hijacks

Résumé

This paper presents a method for visualizing and analyzing Multiple Origin Autonomous System (MOAS) incidents on Border Gateway Protocol (BGP), for the purpose of detecting concurrent prefix hijack. Concurrent prefix hijacks happen when an unauthorized network originates prefixes that belong to multiple other networks. Towards the goal of accurately identifying such events, multiple features are extracted from the BGP records and visualized using parallel coordinates enhanced with visual querying capabilities. The proposed visual queries enable the analyst to select a significant subset of the initial dataset for further analysis, based on the values of multiple features. This procedure allows for the efficient visual fusion of the proposed features and the accurate identification of prefix hijacks. Most of the previous approaches on BGP hijack detection depend on static methods in order to fuse the information from multiple features and identify anomalies. The proposed visual feature fusion, however, allows the human operator to incorporate his expert knowledge into the analysis, so as to dynamically investigate the observed events, and accurately identify anomalies. The efficiency of the proposed approach is demonstrated on state-of-the-art BGP events.
Fichier principal
Vignette du fichier
978-3-662-44722-2_33_Chapter.pdf (436.75 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01391058 , version 1 (02-11-2016)

Licence

Paternité

Identifiants

Citer

Stavros Papadopoulos, Konstantinos Votis, Christos Alexakos, Dimitrios Tzovaras. Feature Extraction and Visual Feature Fusion for the Detection of Concurrent Prefix Hijacks. 10th IFIP International Conference on Artificial Intelligence Applications and Innovations (AIAI), Sep 2014, Rhodes, Greece. pp.310-319, ⟨10.1007/978-3-662-44722-2_33⟩. ⟨hal-01391058⟩
62 Consultations
79 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More