Abstract
Border Gateway Protocol (BGP), which is the defacto standard inter-domain routing protocol in the Internet today, has severe problems, such as worm viruses, denial of service (DoS) attacks, etc. To ensure the stability and security of the inter-domain routing system in the autonomy system, it is critical to accurately and quickly detect abnormal BGP events. In this paper, a novel feature selection algorithm based on the asymmetric entropy named FSAMI is proposed to evaluate the characteristics of describing the BGP abnormal events, which is independent on the machine learning methods. Meanwhile the under-sampling, neural network (NN) and feature selection are introduced to predict BGP abnormal activities to treat the imbalance problem. Numerical experimental results on RIPE archive data set show that the FSAMI method improves the g_means values of abnormal events detection and helps to improve the prediction ability.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Misel, S.: Wow: AS7007, http://www.merit.edu/mail.archives/nanog/1997-04/msg00340.html
Lad, M., Zhao, X., Zhang, B., Massey, D., Zhang, L.: An analysis of BGP update surge during Slammer attack. In: Proceedings of the International Workshop on Distributed Computing (IWDC), pp. 66–79. Springer, Heidelberg (2003)
Cowie, J., Ogielski, A., Premore, B., Smith, E., Underwood, T.: Impact of the 2003 blackouts on Internet communications. Technical report, Renesys (November 2003)
Feather, F., Maxion, R.: Fault detection in an Ethernet network using anomaly signature matching. In: Proceedings of ACM SIGCOMM, San Francisco, CA, September 1993, pp. 279–288 (1993)
Deshpande, S., Thottan, M., Ho, T., Sikdar, B.: A Statistical Approach to Anomaly Detection in Interdomain Routing. In: Proceedings of IEEE BROADNETS, San Hose, CA, October 2006, pp. 1–10 (2006)
Thottan, M., Ji, C.: Anomaly detection in IP networks. IEEE Trans. on Signal Processing 51(8), 2191–2203 (2003)
Li, J., Dou, D., Wu, Z., Kim, S., Agarwal, V.: An Internet Routing Forensics Framework for Discovering Rules of Abnormal BGP Events. ACM SIGCOMM Computer Communication Review 35(5), 55–66 (2005)
Li, G.-Z., Meng, H.-H., Lu, W.-C., Yang, J.Y., Yang, M.Q.: Asymmetric bagging and feature selection for activities prediction of drug molecules. BMC Bioinformatics, 108–114 (2008)
Al-Shahib, A., Breitling, R., Gilbert, D.: Feature Selection and the Class Imbalance Problem in Predicting Protein Function from Sequence. Applied Bioinformatics 4(3), 195–203 (2004); PubMed. (2005)
Zhou, Z.-H., Liu, X.-Y.: Training Cost-Sensitive Neural Networks with Methods Addressing the Class Imbalance Problem. IEEE Transactions On Knowledge And Data Engineering 18(1), 63–77 (2006)
Rekhter, Y., Li, T.: A border gateway protocol 4, BGP-4 (1995)
Marcellin, S., Zigued, D.A., Ritschard, G.: An asymmetric entropy measure for decision trees. In: IPMU 2006, July 2006, pp. 975–982. Paris, France (2006)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2009 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Liu, Y., Ma, L., Yang, N., He, Y. (2009). Asymmetric Feature Selection for BGP Abnormal Events Detection. In: Huang, R., Yang, Q., Pei, J., Gama, J., Meng, X., Li, X. (eds) Advanced Data Mining and Applications. ADMA 2009. Lecture Notes in Computer Science(), vol 5678. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-03348-3_56
Download citation
DOI: https://doi.org/10.1007/978-3-642-03348-3_56
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-03347-6
Online ISBN: 978-3-642-03348-3
eBook Packages: Computer ScienceComputer Science (R0)