BGPWatch
BGP is an unsecure protocol, and any AS on the Internet can forge a BGP message. This vulnerability leads to a lot of harmful BGP events all over the Internet, and BGP hijacking is the famous one. BGPWatch is a knowledge-based real-time BGP hijacking detecting system, which could help monitor the BGP hijacking happening on the Internet. It is mainly based on MOAS and subMOAS events, and relies on domain knowledge, such as ROA, IRR, AS relationship, AS topology etc.
- Knowledge-based real-time BGP hijacking Detection System
- Based on MOAS (subMOAS)
- Exclude legal MOAS by using domain knowledge and rules (ROA, IRR, AS relationship, etc)
