BGP risk evaluation of Brazilian Internet using macroscopic emulation and simulation

• Grant number: 15/24352-9
• Support Opportunities: Regular Research Grants
• Start date: October 01, 2017
• End date: September 30, 2019
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Agreement: MCTI/MC
• Principal Investigator: Cesar Augusto Cavalheiro Marcondes
• Grantee: Cesar Augusto Cavalheiro Marcondes
• Host Institution: Centro de Ciências Exatas e de Tecnologia (CCET). Universidade Federal de São Carlos (UFSCAR). São Carlos , SP, Brazil
• Associated researchers: Anderson Fernandes Pereira dos Santos ; Emerson Rogério Alves Barea ; Jason Xiaowen Liu ; Leonardo Pinto Esteves ; Rogério de Leon Pereira

Abstract

The Internet routing infrastructure is quite vulnerable and the potential for attacks is substantial, that could leave to lots of people without access to a certain content, or even without Internet access at all. To illustrate with an example, in 2008, there was a case that reached the media at large, for two hours, YouTube had an outage on several Asian and European providers. According to reports Pakistan Telecom and PCCW, two Asian providers have been announcing "accidentally" IP addresses prefixes belong to Youtube. Although this kind of cyberattack is less frequent than popular spam, DDoS, malware, etc., it has a high impact on the structure of the Internet and could be used even in military conflicts. In this project, we aim to apply the technology of light and flexible emulation and simulation of networks, to set up a setup an environment of a set of BGP routers that mimics the Brazilian Internet, taking a macroscopic view of the entire routing. Among the challenges we will have to scale the system with virtualization-based "namespaces", work on inference routing policies based on data collected publicly. And once, validated the system with real tests using BGP providers like UFSCar and ANSP, we will study extensively, through automatic vulnerabilities injection in the testbed, which are the potential risks and failures and prepare mitigation plans that allow suggestion to add an extra level of protection to the routing structure of the Brazilian Internet. (AU)