Distributed Denial of Service (DDoS) attacks are among the most critical cybersecurity
threats, jeopardizing the stability of even the largest networks and services. The existing …

The Border Gateway Protocol (BGP) has been used for decades as the de facto protocol to
exchange reachability information among networks in the Internet. However, little is known …

Network attacks, including Distributed Denial-of-Service (DDoS), continuously increase in
terms of bandwidth along with damage (recent attacks exceed 1.7 Tbps) and have a …

The Border Gateway Protocol (BGP) is the primary routing protocol for the Internet
backbone, yet it lacks adequate security mechanisms. While simple BGP hijack attacks only …

BGP communities are a mechanism widely used by operators to manage policy, mitigate
attacks, and engineer traffic; eg, to drop unwanted traffic, filter announcements, adjust local …

Large Distributed Denial-of-Service (DDoS) attacks pose a major threat not only to end
systems but also to the Internet infrastructure as a whole. Remote Triggered Black Hole …

Autonomous Systems (ASes) exchange reachability information between each other using
BGP---the de-facto standard inter-AS routing protocol. While IPv4 (IPv6) routes more specific …

Current network control plane verification tools cannot scale to large networks because of
the complexity of jointly reasoning about the behaviors of all network nodes. We present a …

Although Internet routing security best practices have recently seen auspicious increases in
uptake, Internet Service Providers (ISPs) have limited incentives to deploy them. They are …

The business relationships between Autonomous Systems (ASes) can provide fundamental
insights into the Internet's routing ecosystem. Throughout the last two decades, many works …