BGP Blackholing is an effective mitigation solution for networks to counter the frequent Distributed Denial of Service (DDoS) attacks. It enables to drop all network traffic that is directed towards a particular victim prefix under DDoS attack, ideally, as close to the source as possible. Despite its huge importance in the Internet, there is no tool available for the real-time visualization of BGP Blackholing activity. Visualization is one of the most powerful techniques for network operators to monitor network activity. From discovering successful network topology to expose anomalous behaviors in networks, easy-to-use visualizations are powerful weapons to capture important patterns on the Internet traffic[1, 5]. In this work, we propose a first real-time BGP Blackholing Visibility Tool (named as SmartX BGP-BVT) to detect and visualize community based BGP Blackholing on live BGP data. This tool will be helpful for network operators and researchers interested in BGP Blackholing service and DDoS mitigation in the Internet.

Accurate Internet traffic predictions can provide support to network operators for applications such as traffic engineering, bandwidth allocation, anomaly detection, etc. We apply and compare different forecasting techniques (traditional and machine learning-based techniques) on real BGP data that is collected from two well-known Internet exchange points (IXPs) to derive BGP future volume-based predictions. Our experimental evaluation shows that multivariate Bayesian Ridge outperforms all other forecasting techniques we consider. Through univariate LSTM, we are able to predict new BGP volume-based features. Furthermore, to study the impact of dataset size on BGP forecasting, we perform experiments on three BGP dataset sizes, i.e., Short (one-month), Medium (three-months), and Long (five-months) Periods. Our results show that the Short-Period BGP dataset seems to be sufficient for getting accurate predictions. We also present a use case study (forecast Google Leak anomaly) that supports our experimental evaluations. We provide our collected BGP datasets publically which will be helpful to perform further research experiments and analysis regarding BGP traffic predictions.

Forecasting network traffic is a challenging task for better network management. In this poster, we present a Border Gateway Protocol (BGP) traffic volume prediction framework that uses real BGP data from two famous Internet exchange points (IXPs) to train the LSTM network and generate future volume-based predictions. Our experimental evaluation shows that LSTM can indeed be used to predict BGP traffic volume with a very low prediction errors.

While accurate and complete modeling of the Internet topology at the Autonomous System (AS) level is critical for future protocol design, performance evaluation, simulation and analysis, still it remains a challenge to construct its accurate representation. In this paper, we collect BGP route announcements of ASes from Looking glass (LG) servers. By querying LG servers, we build an AS topology estimate of around 116 K AS links, from which we discover 11 K new AS links and 686 new ASes. We conclude that collecting BGP traces from LG servers can help enhance the current view of the AS topology from the BGP collector projects (e.g., RouteViews).