{"id":"https://openalex.org/W4403981039","doi":"https://doi.org/10.1145/3646547.3689669","title":"Poster: Investigating Autonomous Systems Recurrently Causing Unexplained (Sub)MOAS Events","display_name":"Poster: Investigating Autonomous Systems Recurrently Causing Unexplained (Sub)MOAS Events","publication_year":2024,"publication_date":"2024-11-01","ids":{"openalex":"https://openalex.org/W4403981039","doi":"https://doi.org/10.1145/3646547.3689669"},"language":"en","primary_location":{"id":"doi:10.1145/3646547.3689669","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3646547.3689669","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM on Internet Measurement Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114487393","display_name":"Olivier Bemba","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Olivier Bemba","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, United States"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, United States","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083715286","display_name":"Cecilia Testart","orcid":"https://orcid.org/0000-0002-2993-5059"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cecilia Testart","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040042401","display_name":"Alberto Dainotti","orcid":"https://orcid.org/0000-0001-6444-5656"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alberto Dainotti","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5114487393"],"corresponding_institution_ids":["https://openalex.org/I130701444"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17343941,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"765","last_page":"766"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.8838000297546387,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.8838000297546387,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.8410000205039978,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5767596364021301}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5767596364021301}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3646547.3689669","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3646547.3689669","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM on Internet Measurement Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W1819371985","https://openalex.org/W2302141481"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"The":[0,132],"Border":[1],"Gateway":[2],"Protocol":[3],"(BGP)":[4],"is":[5,114,138],"the":[6,12,24,33,51,55,71,83,112,162,279,289],"de":[7],"facto":[8],"routing":[9],"protocol":[10],"of":[11,54,73,85,88,164,265],"Internet.":[13],"In":[14,297],"BGP,":[15],"networks":[16],"(Autonomous":[17],"Systems,":[18],"ASes)":[19],"advertise":[20,68,80],"to":[21,124,155,166,219],"neighboring":[22],"ASes":[23,38,46,272],"IP":[25,57,75],"address":[26],"blocks":[27],"(IP":[28],"prefixes)":[29],"they":[30,41,101,257],"host":[31,52,72,84],"and":[32,77,96,128,142,149,160,172,180,182,208,250,276,294,307,318],"ones":[34],"hosted":[35],"by":[36,261,282],"other":[37],"towards":[39],"which":[40],"have":[42],"a":[43,86,122,210,262],"path.":[44],"Two":[45],"can":[47,67,79,98,102],"announce":[48],"themselves":[49],"as":[50,70,82,185,311,313],"(origin)":[53],"same":[56,90],"prefix":[58,91],"(Multiple":[59],"Origin":[60],"AS":[61,66,221,291],"prefix,":[62,76],"MOAS).":[63],"Alternatively,":[64],"one":[65],"itself":[69,81],"an":[74,214],"another":[78],"subset":[87],"that":[89,223,256],"(SubMOAS":[92],"prefix).":[93],"If":[94],"MOAS":[95,141,179,227,275],"SubMOAS":[97,143,148,229],"be":[99],"legitimate,":[100],"also":[103,300],"result":[104],"in":[105,204,236],"misdirected":[106],"Internet":[107],"traffic":[108],"(BGP":[109],"hijacking),":[110],"whether":[111],"cause":[113,225],"intentional":[115],"or":[116,228],"not.":[117],"Thus,":[118],"network":[119],"operators":[120],"need":[121],"mechanism":[123],"differentiate":[125],"between":[126,246],"unauthorized":[127],"legitimate":[129],"route":[130],"announcements.":[131],"Global":[133],"Routing":[134],"Intelligence":[135],"Platform":[136],"(GRIP)":[137],"state-of-the-art":[139],"regarding":[140],"detection.":[144],"GRIP":[145,176,244],"automatically":[146],"detects":[147],"MOAS,":[150],"then":[151],"performs":[152],"initial":[153],"filtering":[154],"tag":[156],"obvious":[157],"benign":[158,202,226],"events":[159,189,230,245],"reduce":[161],"number":[163,264],"cases":[165,203],"investigate.":[167],"Between":[168],"January":[169,173,247,251],"1,":[170,174,248,252],"2020,":[171,249],"2023,":[175,253],"detected":[177],"4.5M":[178],"SubMOAS,":[181,277],"classified":[183],"4.36M":[184],"benign,":[186],"leaving":[187],"134k":[188],"without":[190],"explanation.":[191],"We":[192],"call":[193],"them":[194],"unexplained":[195],"events.":[196],"Likely,":[197],"there":[198],"are":[199,232,258],"still":[200],"many":[201],"those":[205],"134K":[206],"events,":[207],"only":[209],"few":[211],"should":[212],"generate":[213],"alert.":[215],"This":[216],"work":[217],"aims":[218],"uncover":[220],"behaviors":[222],"could":[224],"but":[231],"not":[233],"currently":[234],"considered":[235],"BGP":[237,290],"hijacking":[238],"detection":[239],"systems.":[240],"Upon":[241],"examining":[242],"these":[243,271],"we":[254,268,299],"find":[255],"primarily":[259],"caused":[260],"small":[263],"ASes.":[266],"Therefore,":[267],"manually":[269],"investigate":[270],"repeatedly":[273],"causing":[274],"leveraging":[278],"data":[280,287,315],"collected":[281],"GRIP.":[283],"For":[284],"example,":[285],"this":[286],"includes":[288],"path":[292],"attribute":[293],"RPKI":[295],"status.":[296],"addition,":[298],"use":[301],"RIPE":[302],"Stat":[303],"API":[304],"(routing":[305],"history":[306],"ASN":[308],"neighbor":[309],"history),":[310],"well":[312],"WHOIS":[314],"(mainly":[316],"aut-num/ASNumber":[317],"inet-num/NetRange":[319],"objects).":[320]},"counts_by_year":[],"updated_date":"2025-12-27T23:08:20.325037","created_date":"2025-10-10T00:00:00"}