Detection, Classification, and Analysis of Inter-Domain Traffic - PowerPoint PPT Presentation

�� Detection, Classification, and Analysis of Inter-Domain Traffic with Spoofed Source IP Addresses @Internet Measurement Conference ’17, London

Introduction

� �� The Unsolved Spoofing Problem Need for insights about qualitative and quantitative characteristics of spoofed traffic and AS level spoofability

� Detecting Spoofed Traffic is Hard... ? ? SRC IP: 149.10.4.2 How do we decide if a given packet has a spoofed source IP address?

� Overview

�� Contributions �� passive ��

Identifying Spoofed Traffic

What we want to uncover... not of the interface of the sending host � Feature we can leverage... �� Classifying IP Source Addresses

Feature we can leverage... �� Classifying IP Source Addresses What we want to uncover... not of the interface of the sending host �

�� Classifying IP Source Addresses What we want to uncover... not of the interface of the sending host � Feature we can leverage...

�� Things We Should Never See on the Internet: Bogon Bogon IPv4 space routable bogon (86.2%) (13.8%)

� �� Things We Should Never See on the Internet: Unrouted Unrouted IPv4 space routable bogon (86.2%) (13.8%) unrouted (18.1%) AS agnostic �� not ��

�� valid source � valid prefixes per AS � � � �� Who is Allowed to Send What? IPv4 space routable bogon (86.2%) (13.8%) routed (68.1%) unrouted invalid valid (18.1%) AS agnostic AS speci fi c

valid prefixes per AS � � � �� Who is Allowed to Send What? IPv4 space routable bogon (86.2%) (13.8%) routed (68.1%) unrouted invalid valid (18.1%) �� valid source � AS agnostic AS speci fi c

� � �� Who is Allowed to Send What? IPv4 space routable bogon (86.2%) (13.8%) routed (68.1%) unrouted invalid valid (18.1%) �� valid source � AS agnostic AS speci fi c valid prefixes per AS �

� Identifying Invalid: Legitimate IP Address Space per AS other ASes Public Internet AS C AS A AS B AS D

�� Identifying Invalid: Legitimate IP Address Space per AS other ASes p1, p2 Public Internet AS C AS A AS A announcing prefixes p1 and p2 to the other ASes AS B AS D Announcement Assumption � ��

�� Identifying Invalid: Legitimate IP Address Space per AS other ASes p1, p2 Public Internet AS C AS A AS A announcing prefixes p1 and p2 p1 to the other ASes p2 ... AS B List of valid prefixes for AS A AS D Announcement

Detection, Classification, and Analysis of Inter-Domain Traffic - PowerPoint PPT Presentation

A Reproducibility Study of IP Spoofing Detection in Inter-Domain Traffic Jasper Eumann

A Reproducibility Study of IP Spoofing Detection in Inter-Domain Traffic Jasper Eumann,

1 Inter-Domain Routing Network comprised of many Autonomous Systems (ASes) or domains 23

Inter-Domain DOTS Use Cases draft-nishizuka-dots-inter-domain-usecases-00 Kaname Nishizuka, NTT

How NOC manages and controls inter-domain traffic? 5 th tf-noc meeting, Dubrovnik

Analysis and evaluation of classification models for disease detection using human gut

CCECE 2003 Signal Classification through Multifractal Analysis and Complex Domain Neural

CS 557 Inter-Domain Routing Introduction to BGP Routing Tutorial slides from Tim Griffin, 2001

Bootstrapping evolvability for inter-domain routing with D-BGP Raja Sambasivan David Tran-Lam,

An Analysis of Domain Classification Services Pelayo Vallina, Victor Le Pochat, lvaro Feal,

Inter-Domain Routing Security Inter-Domain Routing Security ~ ~BGP BGP Route Hijacking~ Route

From image classification to object detection Image classification Object detection Image source

shot boundary detection combining similarity analysis and classification Matthew Cooper 1 , Ting

Bootstrapping evolvability for inter-domain routing Raja Sambasivan , David Tran-Lam, Aditya

Inter-Domain Lies Based on TMA 2019 Paper - Focus on Infrastructure Julian M. Del Fiore Pascal

Classification And Novel Class Detection ISIC Skin Image Analysis Workshop, June 15 th , 2020

Bloom Filter based Inter-domain Name Resolution: A Feasibility Study Konstantinos V. Katsaros,

Edge detection in JPEG2000 Wavelet Domain - Analysis on Sigmoid Function Edge Model Vytenis

An Architectural Approach to Inter-domain Measurement Data Sharing Brian Trammell Communication

Detection, Segmentation Overview Object Detection deer cat Object Detection as Classification

Requirements Analysis Overview What is requirement ? Classification of requirements

for Domain Adaptation in Chest X-ray Classification Matthias Lenga, Heinrich Schulz, Axel

Branch&Rank: Efficient, Non-Linear Object Detection Alain D. Lehmann, Peter V. Gehler, and

Object detection as supervised classification Tues Nov 10 Kristen Grauman UT Austin Today

Detection, Classification, and Analysis of Inter-Domain Traffic - PowerPoint PPT Presentation

A Reproducibility Study of IP Spoofing Detection in Inter-Domain Traffic Jasper Eumann

A Reproducibility Study of IP Spoofing Detection in Inter-Domain Traffic Jasper Eumann,

1 Inter-Domain Routing Network comprised of many Autonomous Systems (ASes) or domains 23

Inter-Domain DOTS Use Cases draft-nishizuka-dots-inter-domain-usecases-00 Kaname Nishizuka, NTT

How NOC manages and controls inter-domain traffic? 5 th tf-noc meeting, Dubrovnik

Analysis and evaluation of classification models for disease detection using human gut

CCECE 2003 Signal Classification through Multifractal Analysis and Complex Domain Neural

CS 557 Inter-Domain Routing Introduction to BGP Routing Tutorial slides from Tim Griffin, 2001

Bootstrapping evolvability for inter-domain routing with D-BGP Raja Sambasivan David Tran-Lam,

An Analysis of Domain Classification Services Pelayo Vallina, Victor Le Pochat, lvaro Feal,

Inter-Domain Routing Security Inter-Domain Routing Security ~ ~BGP BGP Route Hijacking~ Route

From image classification to object detection Image classification Object detection Image source

shot boundary detection combining similarity analysis and classification Matthew Cooper 1 , Ting

Bootstrapping evolvability for inter-domain routing Raja Sambasivan , David Tran-Lam, Aditya

Inter-Domain Lies Based on TMA 2019 Paper - Focus on Infrastructure Julian M. Del Fiore Pascal

Classification And Novel Class Detection ISIC Skin Image Analysis Workshop, June 15 th , 2020

Bloom Filter based Inter-domain Name Resolution: A Feasibility Study Konstantinos V. Katsaros,

Edge detection in JPEG2000 Wavelet Domain - Analysis on Sigmoid Function Edge Model Vytenis

An Architectural Approach to Inter-domain Measurement Data Sharing Brian Trammell Communication

Detection, Segmentation Overview Object Detection deer cat Object Detection as Classification

Requirements Analysis Overview What is requirement ? Classification of requirements

for Domain Adaptation in Chest X-ray Classification Matthias Lenga, Heinrich Schulz, Axel

Branch&amp;Rank: Efficient, Non-Linear Object Detection Alain D. Lehmann, Peter V. Gehler, and

Object detection as supervised classification Tues Nov 10 Kristen Grauman UT Austin Today

Branch&Rank: Efficient, Non-Linear Object Detection Alain D. Lehmann, Peter V. Gehler, and