Colloquium Details
Faculty Research Colloquium - Internet Routing Anomaly Monitoring and Detection
| Author: | Jun Li University of Oregon |
|---|---|
| Date: | November 10, 2011 |
| Time: | 15:30 |
| Location: | 220 Deschutes |
Abstract
While the Internet has become critical to the society, its routing infrastructure that is in charge of delivering traffic toward different IP address blocks, i.e. IP prefixes, can undergo many types of anomalies. The anomalies can occur at both the global level and the IP prefix level. At the global level, the Internet routing can deviate from its normal state of operation because of disruptive events such as large-scale power outages, undersea cable cuts, or Internet worms, causing what we call an "Internet earthquake." At the IP prefix level, a prefix can experience degraded or completely broken services because of operational malpractice or security attacks; in prefix hijacking, for example, by lying about routing paths an attacker can hijack or intercept traffic toward a prefix at ease.
In this talk, we first describe the Border Gateway Protocol that is at the core of the Internet routing infrastructure, then introduce and discuss two Internet routing monitoring systems that we have been researching: "Internet Seismograph" that can be used to measure Internet earthquakes, and "Buddyguard" that surrounds every monitored prefix with buddy prefixes to detect prefix-level routing anomalies.
Biography
Dr. Jun Li is an associate professor in the Department of Computer and Information Science at the University of Oregon (UO), and directs the UO Network Security Research Laboratory. He received his Ph.D. from UCLA in 2002 (with honors), M.E. from Chinese Academy of Sciences in 1995 (with Presidential Scholarship), and B.S. from Peking University in 1992, all in computer science. In 2011 he is also a "Catedra de Excelencia" (Chair of Excellence) at the Carlos III University of Madrid, Spain, and a visiting researcher at the IMDEA Networks Institute in Spain.
Specialized in computer networks, distributed systems, and their security, Dr. Jun Li studies both direct countermeasures against network security attacks (including Internet worms, phishing, and botnets) and fundamental security issues and solutions at the network architecture and protocol level (such as security for Internet routing, DNS, and peer-to-peer networking). He is further interested in future Internet architecture and social networking, and security challenges and opportunities they each bring.
He has published a book on disseminating security updates over the Internet and more than 30 peer-reviewed papers. He has also served on several USA National Science Foundation research panels and more than 50 international technical program committees. He is a 2007 recipient of the prestigious NSF CAREER award, a senior member of ACM, and a senior member of IEEE.