ARTEMIS (Automatic and Real-Time dEtection and MItigation System), is a research effort between the INSPIRE group, FORTH, Greece (www.inspire.edu.gr) and the Center for Applied Internet Data Analysis (CAIDA), University of California San Diego, USA (www.caida.org).
ARTEMIS is a defense approach versus BGP prefix hijacking attacks (a) based on accurate and fast detection operated by the AS itself, leveraging the pervasiveness of publicly available BGP monitoring services and their recent shift towards real-time streaming, thus (b) enabling flexible and fast mitigation of hijacking events. Compared to existing approaches/tools, ARTEMIS combines characteristics desirable to network operators such as comprehensiveness, accuracy, speed, privacy, and flexibility. With the ARTEMIS approach, prefix hijacking can be neutralized within a minute!
ARTEMIS over ONOS is an implementation of ARTEMIS for SDN-controlled networks, as a multi-module application running on top of the Open Network Operating System (ONOS).
ARTEMIS over ONOS source and documentation
{vkotronis, sermpezis, fontas} (at) ics_dot_forth_dot_gr {alberto, alistair} (at) caida_dot_org
This work was supported by the European Research Council grant agreement no. 338402 (NetVolution Project), the European Research Council grant agreement no. 790575 (PHILOS Project), the RIPE NCC Community Projects Fund, the National Science Foundation (NSF) grant CNS-1423659 and OAC-1848641, the Department of Homeland Security (DHS) Science and Technology Directorate, Cyber Security Division (DHS S&T/CSD) via contract number HHSP233201600012C, and the Comcast Innovation Fund.