RIS Analysis Links Page

Cyclops, a network audit tool developped at UCLA by Ricardo Oliveira, Mohit Lad and Lixia Zhang, which uses RIS data among other sources. April 2009.

Mediterranean Fibre Cable Cut - a RIPE NCC Analysis by RIPE NCC Science Group with contributions from Roma Tre University, 11 April 2008.

YouTube Hijacking: A RIPE NCC RIS case study, 28 February 2008.

S. Lo, R. K. C. Chang and L. Colitti, "An Active Approach to Measuring Routing Dynamics Induced by Autonomous Systems (PDF) ", in Proceedings of the Workshop on Experimental Computer Science (ExpCS), June 2007.

Quantifying Path Exploration in the Internet (PDF) by Ricardo Oliveira, Beichuan Zhang, Dan Pei, Rafit Izhak-Ratzin and Lixia Zhang. Used the RIS beacons for gathering data. October 2006.

PHAS: a prefix hijack alert system (PDF) by Mohit Lad, Dan Massey, Dan Pei, Yiguo Wu, Beichuan Zhang and Lixia Zhang. Uses data collected by RIS and Oregon Route views to feed PHAS, an alert system similar to MyASn. August 2006.

Measurement of Highly Active Prefixes in BGP (PowerPoint Presentation) by Ricardo V. Oliveira, Rafit Izhak-Ratzin, Beichuan Zhang and Lixia Zhang. Used the RIS beacons updates for analysis. November 2005.

ASN Missing In Action - A Comparison of RIR Statistics and RIS Reality (RIPE-353). By Henk Uijterwaal and René Wilhelm. October 2005.

Jun Li et al: An Internet Routing Forensics Framework for Discovering Rules of Abnormal BGP Events (PDF) in Proceedings of the ACM SIGCOMM Computer Communication Review, Volume 35, Number 5, October 2005.

Yorine Internet Information Centre, a tool that uses RIS data to create AS Number and exchange statistics.

BGP-Inspect, a tool that extracts information from raw BGP data. It's implemented by Merit Network Inc.,

A Novel Reconfigurable Hardware Architecture for IP Address Lookup (PDF), research paper from Amir-Kabir University of Technology Tehran, Iran.

BGP convergence analysis (PDF), thesis by Sara Burkle, student at Saarland University, using RIS BGP Beacon data. (Added 08/10/2003).

Hongwei Kong's report on The Consistency Verification of Zebra BGP Data Collection (PDF) is interesting for RIS users who analyse raw data. Hong-Wei has looked at the consistency of Zebra's BGP dumps and the reliability of associated analysis tools. Please send comments to hong-wei_kong@agilent.com. (Added 13/08/2003)

Effects of the DDoS Attack on the RIPE NCC on 27th February 2003, an analysis by the RIPE NCC New Projects Group in cooperation with the Operations Group.

Sapphire/Slammer Worm Impact on Internet Performance, an analysis by the RIPE NCC New Projects Group. 10 February 2003.

Randy Bush et al's slides on FNIISC: Fault-Tolerant Networking through Intrusion Identification & Secure Compartments (PDF) highlight artifacts related to collecting data over EBGP-multihop sessions. (Added 27/01/2003)

Cengiz Alaettinoglu analysis of Peering Loss Analysis at London Internet Exchange (PDF). (Added 28/11/2002).

Z.Morley Mao's page on BGP Beacon analysis. (Added 28/11/2002).

Martian stats, shows occurences of prefixes within "special use" IPv4 address ranges. Calculated daily by RIS from September 2002 till April 2009.

AS Distribution stats, grouped by RIR, single/multi-homed and RRC view. Calculated monthly by RIS from September 2002 till March 2009.

BGP Hotspots stats, lists the top-10 prefixes for which the highest BGP update activity has been observed. Calculated daily by RIS from September 2002 till November 2005.

Agilent Labs' Data Analysis Project, created plots for visualisation and analysis of BGP updates, as received by the RIS Route Collectors. Calculated monthly from May 2002 till September 2004.

Lan Wang's web page with publications focusing on Multiple Origin AS (MOAS) Conflicts and BGP Convergence.

Dan Ardelean's thesis on Tracking Routing Black Holes with the RIS is available in PDF format.

RIS report (old version) generated BGP analysis graphs using RIS data until a new version was put in place in 2009. This tool was designed by Thomas Franchetti, FHWN, for his masters thesis.

Olaf Maennel, T.U. Munich, has been analyzing routing tables from the RIS and MAE-east and MAE-west.

The RRCC (Routing Registry Consistency Check) project combines data from RIS with information stored in the RIPE Whois Database to analyze the consistency of routing registry data for AS numbers.

Renesys Corp is looking at the effects of DDoS's and routing. Their first paper is:

• Cowie, J., Ogielski, A., Premore, B., and Yuan, Y. (2001) Global Routing Instabilities during Code Red II and Nimda Worm Propagation., http://www.renesys.com/projects/bgp_instability, September 2001.

Fabrizio Lombardozzi (Computer Network Research Group at the University of ROME III, Italy) has developed a flap-viewer to visualize routing changes.

B. Quoitin, O. Bonaventure (The Infonet group) have published an Internet draft, which describes the two most common utilizations of the BGP community attribute by analysing RIS BGP table dumps: A survey of the utilization of the BGP community attribute.

M.Roughan et al: IP Forwarding Anomalies and Improving their detection using multiple data sources (PDF), in Proceedings of the ACM SIGCOMM 2004 workshops, pp. 307.

A.Feldman et al: Measuring BGP Pass-Through times (PDF), in Proceedings of the PAM 2004 workshops, pp. 267.

Initial design document for the RIS project: RIPE-200 (PDF).