For an Internet Service Provider, AS numbers are a logical representation of the other ISP peering or communicating with his autonomous system. ISP customers are using the capacity of the Internet Service Provider to reach Internet services over other AS. Some of those communications can be malicious (e.g. due to malware activities on an end-user equipments) and hosted at specific AS location. In order to provide an improved security view on those AS numbers, a trust ranking scheme will be implemented based on existing dataset of compromised systems, malware C&C IP and existing datasets of the ISPs.
I always have to start/stop the ranking scripts twice for the ranking to take place.
I guess the first time only the bview is downloaded and the second time ranking happens. I'm not sure about the internals of BGP Ranking but maybe there should be a sleep time between start_fetch_bview.py and start_push_update_routing.py. What do you think?
Rafiot
commented
14 years ago
I always have to start/stop the ranking scripts twice for the ranking to take place. I guess the first time only the bview is downloaded and the second time ranking happens. I'm not sure about the internals of BGP Ranking but maybe there should be a sleep time between start_fetch_bview.py and start_push_update_routing.py. What do you think?