BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net...
Transcript of BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net...
![Page 1: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/1.jpg)
BGPeep An IP-space Centered View for Internet Routing Data
James Shearer and Kwan-Liu Ma University of California, Davis VIDi Lab
Toby Kohlenberg Intel Corporation
![Page 2: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/2.jpg)
Identify and select data
Visualize and explore the selection
Tag Cloud
Viewer
![Page 3: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/3.jpg)
Tag Cloud
• Select a subset of the data (pluggable)
• View the results
• Filter the results (pluggable)
• Select specific ASes for further analysis
![Page 4: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/4.jpg)
![Page 5: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/5.jpg)
![Page 6: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/6.jpg)
![Page 7: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/7.jpg)
Update View
• Visualization of many, many updates from multiple ASes
• Controls to focus in one one AS or prefix in context
• Time-based restriction
• Linked “traditional” view for additional detail
![Page 8: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/8.jpg)
![Page 9: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/9.jpg)
![Page 10: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/10.jpg)
![Page 11: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/11.jpg)
AS Emphasis
Off On
![Page 12: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/12.jpg)
Prefix Focus
Off On
![Page 13: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/13.jpg)
Entire time range slected
Subset of time selected
![Page 14: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/14.jpg)
Route Flapping
![Page 15: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/15.jpg)
![Page 16: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/16.jpg)
![Page 17: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/17.jpg)
Future Work
• Monitoring mode is essential
• Performance
• Additional filters and searches
![Page 18: BGPeep - VizSec · maxtelecom-as mcc-rs-as meagtelecom mediaworks-as meijernet metr02000 migton-net milnet-t20 mk-mol-as "i-as mnet-bg mnu-as-kr mobikom mobtel-net mokpo-as-kr moldtelecom-as](https://reader033.fdocuments.in/reader033/viewer/2022052721/5f0b6d6e7e708231d430777b/html5/thumbnails/18.jpg)
Annotated video demonstration at: ���http://vidi.cs.ucdavis.edu/research���
������
Questions?