The global routing network is the backbone of the Internet. However, it is quite vulnerable to attacks that cause major disruptions or routing manipulations. Prior related works have visualized routing path changes with node link diagrams, but it requires strong domain expertise to understand if a routing change between autonomous systems is suspicious. Geographic visualization has an advantage over conventional node-link diagrams by helping uncover such suspicious routes as the user can immediately see if a path is the shortest path to the target or an unreasonable detour. In this paper, we present ProBGP, a web-based progressive approach to visually analyze BGP update routes. We created a novel progressive data processing algorithm for the geographic approximation of autonomous systems and combined it with a progressively updating visualization. While the newest log data is continuously loaded, our approach also allows querying the entire log recordings since 1999. We present the usefulness of our approach with a real use case of a major route leak from June 2019. We report on multiple interviews with domain experts throughout the development. Finally, we evaluated our algorithm quantitatively against a public peering database and qualitatively against AS network maps.

中文翻译：

---

ProBGP：实时 BGP 更新的渐进式可视化分析

全球路由网络是互联网的骨干。但是，它很容易受到导致重大中断或路由操纵的攻击。先前的相关工作已经使用节点链接图可视化路由路径更改，但需要强大的领域专业知识来了解自治系统之间的路由更改是否可疑。地理可视化比传统的节点链接图更具优势，它有助于发现可疑路线，因为用户可以立即看到路径是到达目标的最短路径还是不合理的绕道。在本文中，我们介绍了 ProBGP，这是一种基于 Web 的渐进式方法，可直观地分析 BGP 更新路由。我们为自治系统的地理近似创建了一种新颖的渐进式数据处理算法，并将其与渐进式更新的可视化相结合。在不断加载最新的日志数据的同时，我们的方法还允许查询自 1999 年以来的整个日志记录。我们通过 2019 年 6 月以来主要路由泄漏的真实用例展示了我们方法的实用性。我们报告了对领域专家的多次采访在整个开发过程中。最后，我们针对公共对等数据库定量评估了我们的算法，并针对 AS 网络地图进行了定性评估。