@article {lutu2014bgp,
	title = {The BGP Visibility Toolkit: Detecting Anomalous Internet Routing Behavior},
	journal = {IEEE/ACM Transactions on Networking},
	year = {2015},
	month = {04/2015},
	publisher = {IEEE},
	abstract = {In this paper, we propose the BGP Visibility Toolkit, a system for detecting and analyzing anomalous behavior in the Internet. We show that interdomain prefix visibility can be used to single out cases of erroneous demeanors resulting from misconfiguration or bogus routing policies. The implementation of routing policies with BGP is a complicated process, involving fine-tuning operations and interactions with the policies of the other active ASes. Network operators might end up with faulty configurations or unintended routing policies that prevent the success of their strategies and impact their revenues. As part of the Visibility Toolkit, we propose the BGP Visibility Scanner, a tool which identifies limited visibility prefixes in the Internet. The tool enables operators to provide feedback on the expected visibility status of prefixes. We build a unique set of ground-truth prefixes qualified by their ASes as intended or unintended to have limited visibility. Using a machine learning algorithm, we train on this unique dataset an alarm system that separates with 95\% accuracy the prefixes with unintended limited visibility. Hence, we find that visibility features are generally powerful to detect prefixes which are suffering from inadvertent effects of routing policies. Limited visibility could render a whole prefix globally unreachable. This points towards a serious problem, as limited reachability of a non-negligible set of prefixes undermines the global connectivity of the Internet. We thus verify the correlation between global visibility and global connectivity of prefixes.},
	keywords = {Anomaly detection, BGP, Internet measurements, Machine learning},
	doi = {10.1109/TNET.2015.2413838},
	author = {Lutu, Andra and Bagnulo, Marcelo and Pelsser, Cristel and Maennel, Olaf and Cid-Sueiro, Jesus}
}
@inproceedings {lutu2014understanding,
	title = {Understanding the reachability of IPv6 limited visibility prefixes},
	journal = {Passive and Active Measurement},
	year = {2014},
	month = {03/2014},
	pages = {163{\textendash}172},
	publisher = {Springer},
	abstract = {The main functionality of the Internet is to provide global connectivity for every node attached to it. In light of the IPv4 address space depletion, large networks are in the process of deploying IPv6. In this paper we perform an extensive analysis of how BGP route propagation affects global reachability of the active IPv6 address space in the context of this unique transition of the Internet infrastructure. We propose and validate a methodology for testing the reachability of an IPv6 address block active in the routing system. Leveraging the global visibility status of the IPv6 prefixes evaluated with the BGP Visibility Scanner, we then use this methodology to verify if the visibility status of the prefix impacts its reachability at the interdomain level. We perform active measurements using the RIPE Atlas platform. We test destinations with different BGP visibility degrees (i.e., limited visibility - LV, high visibility - HV and dark prefixes). We show that the IPv6 LV prefixes (v6LVPs) are generally reachable, mostly due to a less-specific\&nbsp;HV\&nbsp;covering prefix (v6HVP). However, this is not the case of the dark address space, which, by not having a covering v6HVP is largely unreachable.},
	isbn = {978-3-319-04917-5},
	issn = {0302-9743},
	doi = {10.1007/978-3-319-04918-2_16},
	author = {Lutu, Andra and Bagnulo, Marcelo and Pelsser, Cristel and Maennel, Olaf}
}
