Situation assessment model for inter-domain routing system

摘要

Although nowadays Internet is facing more and more threats, very few works have investigated the security situation assessment for inter-domain routing system which is the most significant infrastructure of Internet. To deal with the problem, a situation assessment model based on the immune Danger Theory is proposed. In this study, the authors first give a comprehensive description of the model architecture as well as practical considerations, and then the main components including signal mapping, antigen selection, routing behaviour analysis and global situation assessment are, respectively, defined and illustrated. Evaluations are launched in view of Japan earthquake and YouTube hijacking, and the results show that the model is able to assess the global anomalous degree of specific inter-domain routing system quantitatively, which can provide network administrator with accurate and timely information to conduct network monitoring and route protection.