Expanding BGP Data Horizons
BGP data collection platforms as currently architected face fundamental challenges that threaten their long-term sustainability: their data comes with enormous redundancy and yet dangerous visibility gaps. GILL is a new BGP routes collection platform that can collect routes from at least an order of magnitude more routers compared to existing platforms while limiting the increase in human effort and data volume. GILL’s key principle is an overshoot-and-discard collection scheme: Any AS can easily peer with GILL and export their routes. GILL offers a lossy compression algorithm that only stores the nonredundant routes as well as lossless compression leveraging redundancy in BGP attributes, in our new bgproutes.io platform. Our new mode of data selection and delivery enables to improve BGP data analysis such as topology mapping, AS ranking, and forged origin hijack detection.
We have built such a detector. DFOH is a system designed to detect forged-origin hijacks across the entire Internet. Forged-origin hijacks are typically malicious BGP hijacks where attackers manipulate the AS path of BGP messages to make them appear as legitimate routing updates. DFOH is particularly useful because the proposed BGP extensions for cryptographically verifying the validity of AS paths (e.g., BGPSec or ASPA) are challenging to deploy widely. With DFOH, operators can quickly and confidently determine when their traffic is being hijacked.
Cristel Pelsser holds a chair in critical embedded systems at UCLouvain. From 2015 to 2022 she was a full professor at the University of Strasbourg (France) where she led a team of researchers focusing on core Internet technologies. She spent nine years as a researcher working for ISPs in Japan. Her aim is to facilitate network operations, to avoid network disruptions and, when they occur, pinpoint the failures precisely in order to quickly fix the issues, understand them in order to design solutions to prevent recurrence. Cristel received the PhD degree from the Université catholique de Louvain (UCLouvain), Belgium.
Lessons Learned from 20 Years of Collecting Internet Data
Emile Aben has been supporting and working with Internet researchers for over 20 years while working at CAIDA and at the RIPE NCC. In this keynote he will share the lessons he learned from being involved in data collection projects like the UCSD Network Telescope, RIPE Atlas and RIPE RIS.
Emile Aben is a Data Scientist at RIPE NCC, with a background in chemistry and over two decades of experience in Internet technologies. His work bridges research and operations, focusing on IPv6, Internet measurement, data analysis, visualization, sustainability, and security. Outside of work, he enjoys making music, swimming, skating, bouldering, and parenting.