Opened 5 years ago

Last modified 17 months ago

#10222 assigned enhancement

Implement network wide and router specific views of malicious BGP route events

Reported by: anon Owned by: metrics-team
Priority: Medium Milestone:
Component: Metrics/Analysis Version:
Severity: Normal Keywords: nickm-cares
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Display the quantity, duration, and detail(TBD) of malicious BGP route attacks affecting any addresses used by active routers in the Tor network for the time period in question.

"Malicious route attack" is explicitly intended here as distinct from anomalous route changes or advertisement behavior, nor does it encompass benign incompetence affecting widespread route behavior of an indiscriminate nature.

See also:
http://www.renesys.com/2013/11/mitm-internet-hijacking/
http://www.renesys.com/2010/11/chinas-18-minute-mystery/

Child Tickets

Change History (4)

comment:1 Changed 5 years ago by karsten

Component: Metrics WebsiteAnalysis

I have no idea what to do here. The metrics website takes data from CollecTor (https://collector.torproject.org/), aggregates it, and displays the result in graphs and tables.

This ticket seems like it needs research before something can be included in descriptors and displayed on the metrics website. Moving to Analysis.

comment:2 Changed 19 months ago by nickm

Keywords: nickm-cares added

comment:3 Changed 19 months ago by karsten

Owner: set to metrics-team
Status: newassigned

comment:4 Changed 17 months ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

Note: See TracTickets for help on using tickets.