Abstract:

The security and reliability of the inter-domain routing system of the Internet are of great significance for cybersecurity. Understanding the propagation patterns of inter-domain routing is crucial for detecting abnormal network routing events and enhancing routing security measures. The article proposed an analysis method of inter-domain routing propagation characteristics based on routing temporal betweenness. By defining the routing time betweenness centrality of autonomous systems, the proportion of time autonomous system forwards specific data traffic was characterized, thus comprehensively reflecting the propagation process and state characteristics of routing messages in the network. From a temporal perspective, this method could establish a normal baseline for inter domain routing systems. From a spatial perspective, this method could identify key autonomous system information related to the target network. Based on the massive inter domain routing data and topology data publicly available on the Internet, routing propagation characteristics were studied for the KlaySwap prefix hijacking event, the prefix ownership change event and the Angola Cables routing leak event, providing a powerful support for anomaly detection of prefix hijacking and route leakage.

Key words: routing security, inter-domain routing system, routing temporal betweenness, propagation characteristics