{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,8]],"date-time":"2026-04-08T22:15:22Z","timestamp":1775686522893,"version":"3.50.1"},"reference-count":76,"publisher":"Oxford University Press (OUP)","issue":"1","license":[{"start":{"date-parts":[[2021,8,17]],"date-time":"2021-08-17T00:00:00Z","timestamp":1629158400000},"content-version":"vor","delay-in-days":228,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,8,17]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>In November 2019, in the wake of political demonstrations against the regime, Iran managed to selectively cut off most traffic from the global Internet while fully operating its own domestic network. It seemingly confirmed the main hypothesis our research had led us to, based on prior observation of data routing: Iran\u2019s architecture of connectivity enables selective censorship of international traffic. This paper examines, through the case of Iran, how states can leverage the Border Gateway Protocol (BGP) as a tool of geopolitical control and what are the trade-offs they face. This question raises a methodological question that we also address: how the analysis of BGP can infer and document these strategies of territorialization of cyberspace. The Internet is a network of networks where each network is an autonomous system. Autonomous systems (ASes) are independent administrative entities controlled by a variety of actors such as governments, companies and universities. Their administrators have to agree and communicate on the path followed by packets travelling across the Internet, which is made possible by BGP. Agreements between ASes are often confidential but BGP requires neighbouring ASes to interact with each other in order to coordinate routing through the constant release of connectivity update messages. These messages announce the availability (or withdrawal) of a sequence of ASes that can be followed to reach an IP address prefix. In our study, we inferred the structure of Iran's connectivity through the capture and analysis of these BGP announcements. We show how the particularities of Iran's BGP and connectivity structure can enable active measures, such as censorship, both internally and externally throughout the network. We argue that Iran has found a way to reconcile a priori conflicting strategic goals: developing a self-sustaining and resilient domestic Internet, but with tight control at its borders. It thus enables the regime to leverage connectivity as a tool of censorship in the face of social instability and as a tool of regional influence in the context of strategic competition.<\/jats:p>","DOI":"10.1093\/cybsec\/tyab018","type":"journal-article","created":{"date-parts":[[2021,8,17]],"date-time":"2021-08-17T07:17:03Z","timestamp":1629184623000},"source":"Crossref","is-referenced-by-count":18,"title":["The geopolitics behind the routes data travel: a case study of Iran"],"prefix":"10.1093","volume":"7","author":[{"given":"Loqman","family":"Salamatian","sequence":"first","affiliation":[{"name":"Department of Computer Science, Columbia University Mudd Building, 500 W 120th St, New York, NY 10027, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2516-439X","authenticated-orcid":false,"given":"Fr\u00e9d\u00e9rick","family":"Douzet","sequence":"additional","affiliation":[{"name":"GEODE, Universit\u00e9 Paris 8, Campus Condorcet, B\u00e2timent Nord, 14, cours des Humanit\u00e9s, 93322 Aubervilliers, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kav\u00e9","family":"Salamatian","sequence":"additional","affiliation":[{"name":"Polytech Annecy-Chambery, Universit\u00e9 de Savoie, 5 chemin de Bellevue, 74940 Annecy, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"K\u00e9vin","family":"Limonier","sequence":"additional","affiliation":[{"name":"GEODE, Universit\u00e9 Paris 8, Campus Condorcet, B\u00e2timent Nord, 14, cours des Humanit\u00e9s, 93322 Aubervilliers, France"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2021,8,17]]},"reference":[{"key":"2021081707162340300_bib1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.4101\/jvwr.v5i2.6206","article-title":"Escaping the world: a chinese perspective on virtual worlds","volume":"5","author":"Herold","year":"2012","journal-title":"J Virtual Worlds Res"},{"key":"2021081707162340300_bib2","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1145\/2668152.2668966","article-title":"Why is it taking so long to secure Internet routing? Routing security incidents can still slip past deployed security defenses","volume":"12","author":"Goldberg","year":"2014","journal-title":"Queue"},{"key":"2021081707162340300_bib3","doi-asserted-by":"crossref","first-page":"106","DOI":"10.1145\/52325.52336","article-title":"The design philosophy of the DARPA Internet protocols","volume":"18","author":"Clark","year":"1988","journal-title":"ACM SIGCOMM Comput Commun Rev"},{"key":"2021081707162340300_bib4","article-title":"Understanding the network-level behavior of spammers","author":"Feamster","year":"2006","journal-title":"ACM SIGCOMM Comput Commun Rev"},{"key":"2021081707162340300_bib5","article-title":"Internet censorship in Iran: a first look","volume-title":"3rd Workshop on Free and Open Communications on the Internet","author":"Aryan","year":"2013"},{"key":"2021081707162340300_bib6","doi-asserted-by":"crossref","DOI":"10.1145\/2670518.2673869","article-title":"Anonymity on QuickSand: using BGP to compromise Tor","volume-title":"Proceedings of the 13th ACM Workshop on Hot Topics in Networks","author":"Vanbever"},{"key":"2021081707162340300_bib7","doi-asserted-by":"crossref","first-page":"40","DOI":"10.1145\/2390756.2405036","article-title":"SplInternet behind the great firewall of china","volume":"10","author":"Anderson","year":"2012","journal-title":"ACM Queue"},{"key":"2021081707162340300_bib8","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2015.23035","article-title":"Mind your blocks: on the stealthiness of malicious BGP hijacks","volume-title":"Proceedings 2015 Network and Distributed System Security Symposium","author":"Vervier"},{"key":"2021081707162340300_bib9","doi-asserted-by":"crossref","first-page":"100","DOI":"10.1109\/JPROC.2009.2034031","article-title":"A survey of BGP security issues and solutions","volume":"98","author":"Butler","year":"2009","journal-title":"Proc IEEE"},{"key":"2021081707162340300_bib10","doi-asserted-by":"crossref","first-page":"291","DOI":"10.1145\/1159913.1159947","article-title":"Understanding the network-level behavior of spammers","volume-title":"Proceedings of the 2006 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications","author":"Ramachandran","year":"2006"},{"key":"2021081707162340300_bib11","doi-asserted-by":"crossref","first-page":"3","DOI":"10.3917\/her.152.0003","article-title":"Understanding cyberspace with geopolitics","volume":"152\u20133","author":"Douzet","year":"2014","journal-title":"H\u00e9rodote"},{"key":"2021081707162340300_bib12","doi-asserted-by":"crossref","first-page":"325","DOI":"10.4337\/9781788978057.00043","article-title":"Cyberspace: the new frontier of state power","volume-title":"Handbook on the Changing Geographies of the State","author":"Douzet","year":"2020"},{"key":"2021081707162340300_bib13","volume-title":"Cyber War Will Not Take Place","author":"Rid","year":"2013"},{"key":"2021081707162340300_bib14","doi-asserted-by":"crossref","DOI":"10.1017\/9781316422724","volume-title":"Cyber Mercenaries","author":"Maurer","year":"2018"},{"key":"2021081707162340300_bib15","doi-asserted-by":"crossref","first-page":"11","DOI":"10.1016\/j.polgeo.2014.10.001","article-title":"The birth of cyber war","volume":"46","author":"Kaiser","year":"2015","journal-title":"Polit Geogr"},{"key":"2021081707162340300_bib16","first-page":"325","article-title":"Cyberspace is not a warfighting domain","volume":"8","author":"Libicki","year":"2012","journal-title":"J Law Policy Inf Soc"},{"key":"2021081707162340300_bib17","article-title":"NATO's role in cyberspace","author":"Brent","year":"2019","journal-title":"NATO Rev"},{"key":"2021081707162340300_bib18","doi-asserted-by":"crossref","first-page":"21","DOI":"10.1177\/0096340213501370","article-title":"Who controls cyberspace?","volume":"69","author":"Choucri","year":"2013","journal-title":"Bull At Sci"},{"key":"2021081707162340300_bib19","volume-title":"Security: A New Framework for Analysis","author":"Buzan","year":"1998"},{"key":"2021081707162340300_bib20","article-title":"The Militarisation of Cyberspace: Why Less May Be Better","volume-title":"4th International Conference on Cyber Conflict 2013","author":"Dunn\u00a0Cavelty"},{"key":"2021081707162340300_bib21","volume-title":"Will the Internet Fragment? Sovereignty, Globalization and Cyberspace","author":"Mueller","year":"2017"},{"key":"2021081707162340300_bib22","doi-asserted-by":"crossref","first-page":"482","DOI":"10.1093\/isr\/viz022","article-title":"The territorialization of cyberspace","volume":"22","author":"Lambach","year":"2020\/09","journal-title":"Int Studies Rev"},{"key":"2021081707162340300_bib23","article-title":"The geopolitics of Internet control: censorship, sovereignty, and cyberspace","volume-title":"Routledge Handbook of Internet Politics","author":"Deibert"},{"key":"2021081707162340300_bib24","doi-asserted-by":"crossref","DOI":"10.12987\/yale\/9780300181357.001.0001","volume-title":"The Global War for Internet Governance","author":"Denardis","year":"2014"},{"key":"2021081707162340300_bib25","doi-asserted-by":"crossref","DOI":"10.7551\/mitpress\/9780262014595.001.0001","volume-title":"Networks and States: The Global Politics of Internet Governance","author":"Mueller","year":"2010"},{"key":"2021081707162340300_bib26","doi-asserted-by":"crossref","DOI":"10.7551\/mitpress\/11334.001.0001","volume-title":"International Relations in the Cyber Age. The Co-Evolution Dilemma","author":"Choucri","year":"2019"},{"key":"2021081707162340300_bib27","article-title":"The myth of the decentralised Internet","volume":"5","author":"Mathew","year":"2016","journal-title":"Int Policy Rev"},{"key":"2021081707162340300_bib28","doi-asserted-by":"crossref","first-page":"364","DOI":"10.1080\/24701475.2019.1661583","article-title":"The evolution of Internet routing: technical roots of the network society","volume":"3","author":"Fidler","year":"2019","journal-title":"Internet Hist"},{"key":"2021081707162340300_bib29","first-page":"307","article-title":"Stable Internet routing without global coordination","volume":"9","author":"Gao","year":"2000","journal-title":"IEEE\/ACM Trans Netw"},{"key":"2021081707162340300_bib30","doi-asserted-by":"crossref","first-page":"36","DOI":"10.1109\/COMST.2008.4483669","article-title":"An overview of routing optimization for Internet traffic engineering","volume":"10","author":"Wang","year":"2008","journal-title":"IEEE Commun Surv Tutor"},{"key":"2021081707162340300_bib31","doi-asserted-by":"crossref","first-page":"733","DOI":"10.1109\/90.974527","article-title":"On inferring autonomous system relationships in the Internet","volume":"9","author":"Gao","year":"2001","journal-title":"IEEE\/ACM Trans Netw"},{"key":"2021081707162340300_bib32","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3209811.3211887","article-title":"Nation-state hegemony in Internet routing","volume-title":"Proceedings of the 1st ACM SIGCAS Conference on Computing and Sustainable Societies","author":"Edmundson","year":"2018"},{"key":"2021081707162340300_bib33","article-title":"Nation-state routing: censorship, wiretapping, and BGP","author":"Karlin","year":"2009","journal-title":"ArXiv"},{"key":"2021081707162340300_bib34","doi-asserted-by":"crossref","first-page":"200","DOI":"10.1007\/978-3-642-28537-0_20","article-title":"Exposing a nation-centric view on the German Internet: a change in perspective on AS-level","volume-title":"Passive and Active Measurement","author":"W\u00e4hlisch","year":"2012"},{"key":"2021081707162340300_bib35","volume-title":"Dictionnaire de g\u00e9opolitique","author":"Lacoste","year":"1993"},{"key":"2021081707162340300_bib36","doi-asserted-by":"crossref","DOI":"10.4324\/9780203165270","volume-title":"Mapping Cyberspace","author":"Dodge","year":"2003"},{"key":"2021081707162340300_bib37","doi-asserted-by":"crossref","DOI":"10.1057\/9781137483591","volume-title":"The Turn to Infrastructure in Internet Governance","author":"Musiani","year":"2016"},{"key":"2021081707162340300_bib38","doi-asserted-by":"crossref","first-page":"22","DOI":"10.1109\/MSP.2016.50","article-title":"Chasing data in the intermediation era: economy and security at stakes","volume":"14","author":"Faravelon","year":"2016","journal-title":"IEEE Secur Priv"},{"key":"2021081707162340300_bib39","first-page":"145","article-title":"Guerre hybride russe dans le cyberespace (fr)","volume":"166-167","author":"Limonier","year":"2017","journal-title":"Herodote"},{"key":"2021081707162340300_bib40","article-title":"The IRA, social media and political polarization in the United States, 2012\u20132018","author":"Howard","year":"2018"},{"key":"2021081707162340300_bib41","doi-asserted-by":"crossref","DOI":"10.23919\/CyCon49761.2020.9131726","article-title":"Measuring the fragmentation of the Internet: the case of the Border Gateway Protocol (BGP) during the Ukrainian crisis","volume-title":"2020 12th International Conference on Cyber Conflict 20\/20 Vision: The Next 2020","author":"Douzet"},{"key":"2021081707162340300_bib42","doi-asserted-by":"crossref","DOI":"10.5210\/fm.v26i5.11700","article-title":"Mapping the routes of the Internet for geopolitics: the case of Eastern Ukraine","author":"Limonier","year":"2021","journal-title":"First Monday"},{"key":"2021081707162340300_bib43","volume-title":"The role of social media in Iran's Green Movement","author":"Moghanizadeh","year":"2013","edition":"Ph.D. Thesis"},{"key":"2021081707162340300_bib44","first-page":"259","article-title":"Presentation of the civil defense strategy against cyber threads","volume":"75","author":"Farahan","year":"2019","journal-title":"J Strateg Def Stud"},{"key":"2021081707162340300_bib45","article-title":"Broadband networks in the Middle East and North Africa: accelerating high-speed Internet access","author":"Gelvanovska","year":"2014","journal-title":"World Bank"},{"key":"2021081707162340300_bib46","first-page":"3","article-title":"L'Iran : un acteur majeur au moyen-orient (fr)","volume":"169","author":"Giblin","year":"2018","journal-title":"Herodote"},{"key":"2021081707162340300_bib47","doi-asserted-by":"crossref","first-page":"659","DOI":"10.1007\/11422778_53","article-title":"Describing and simulating Internet routes","volume-title":"NETWORKING 2005. Networking Technologies, Services, and Protocols; Performance of Computer and Communication Networks; Mobile and Wireless Communications Systems","author":"Leguay","year":"2005"},{"key":"2021081707162340300_bib48","volume-title":"ACM Internet Measurement Conference \u2013 IMC","author":"Chiu","year":"2015"},{"key":"2021081707162340300_bib49","doi-asserted-by":"crossref","DOI":"10.1145\/2994475.2994477","article-title":"Firewalling scenic routes: preventing data exfiltration via political and geographic routing policies","volume-title":"Proceedings of the 2016 ACM Workshop on Automated Decision Making for Active Cyber Defense","author":"Benton","year":"2016"},{"key":"2021081707162340300_bib50","doi-asserted-by":"crossref","first-page":"283","DOI":"10.1177\/2043820611421546","article-title":"Topological twists: power's shifting geographies","volume":"1","author":"Allen","year":"2011","journal-title":"Dialogues Hum Geogr"},{"key":"2021081707162340300_bib51","doi-asserted-by":"crossref","DOI":"10.1145\/2504730.2504735","article-title":"As relationships, customer cones, and validation","volume-title":"Proceedings of the 2013 Internet Measurement Conference \u2013 IMC","author":"Luckier","year":"2013"},{"key":"2021081707162340300_bib52","first-page":"152","article-title":"Peut-on penser une cyberg\u00e9ographie (fr)?","volume":"123","author":"Robine","year":"2014","journal-title":"H\u00e9rodote"},{"key":"2021081707162340300_bib53","doi-asserted-by":"crossref","first-page":"1810","DOI":"10.1109\/JSAC.2011.111006","article-title":"10 lessons from 10 years of measuring and modeling the Internet's autonomous systems","volume":"29","author":"Roughan","year":"2011","journal-title":"IEEE J Sel Areas Commun"},{"key":"2021081707162340300_bib54","article-title":"A geometric approach for real-time monitoring of dynamic large scale graphs: AS-level graphs illustrated","volume-title":"Cornell University","author":"Salamatian","year":"2018"},{"key":"2021081707162340300_bib55","doi-asserted-by":"crossref","DOI":"10.1145\/2987443.2987482","article-title":"BGPStream: a software framework for live and historical BGP data analysis","volume-title":"Proceedings of the 2016 Internet Measurement Conference","author":"Orsini","year":"2016"},{"key":"2021081707162340300_bib56","article-title":"Pushing the boundaries with bdrmapIT: mapping router ownership at Internet scale","volume-title":"Proceedings of the Internet Measurement Conference","author":"Marder","year":"2018"},{"key":"2021081707162340300_bib57","doi-asserted-by":"crossref","DOI":"10.1145\/2342356.2342393","article-title":"Anatomy of a large European IXP","volume-title":"Proceedings of the ACM SIGCOMM 2012 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication","author":"Ager","year":"2012"},{"key":"2021081707162340300_bib58","doi-asserted-by":"crossref","DOI":"10.1109\/INFOCOM.2006.234","article-title":"The Internet dark matter-on the missing links in the as connectivity map","volume-title":"Proceedings IEEE INFOCOM 2006. 25TH IEEE International Conference on Computer Communications","author":"Cohen","year":"2006"},{"key":"2021081707162340300_bib59","doi-asserted-by":"crossref","DOI":"10.1145\/2398776.2398803","article-title":"On the incompleteness of the AS-level graph: a novel methodology for BGP route collector placement","volume-title":"Proceedings of the 2012 Internet Measurement Conference","author":"Gregori","year":"2012"},{"key":"2021081707162340300_bib60","volume-title":"Mapping local Internet control","author":"Roberts","year":"2011"},{"key":"2021081707162340300_bib61","doi-asserted-by":"crossref","first-page":"e98679","DOI":"10.1371\/journal.pone.0098679","article-title":"ForceAtlas2, a continuous graph layout algorithm for handy network visualization designed for the Gephi software","volume":"9","author":"Jacomy","year":"2014","journal-title":"PLoS One"},{"key":"2021081707162340300_bib62","article-title":"Stuxnet, American sanctions, and cyberwar are legitimizing Iranian Internet controls","volume-title":"VICE","author":"Alimardani","year":"2019"},{"key":"2021081707162340300_bib63","article-title":"Chaos & control: the competing tensions of Internet governance in Iran","author":"Marchant","year":"2015","journal-title":"Internet Policy Observatory"},{"key":"2021081707162340300_bib64","article-title":"Layers of Internet censorship in Iran","author":"Shaheed","year":"2014"},{"key":"2021081707162340300_bib65","volume-title":"New Blocking Activity from Iran","author":"Tor Blog"},{"key":"2021081707162340300_bib66","first-page":"663","article-title":"Publishers split over response to US trade embargo ruling","volume":"427","author":"Brumfiel","year":"2004","journal-title":"Nature"},{"key":"2021081707162340300_bib67","article-title":"If you don't know, now you know: GitHub is restricting access for users from Iran and a few other embargoed countries","volume-title":"DEV","author":"Raadi","year":"2019"},{"key":"2021081707162340300_bib68","doi-asserted-by":"crossref","first-page":"21","DOI":"10.1145\/2317307.2317311","article-title":"The collateral damage of Internet censorship by DNS injection","volume":"42","author":"Levis","year":"2012","journal-title":"SIGCOMM Comput Commun Revi"},{"key":"2021081707162340300_bib69","doi-asserted-by":"crossref","first-page":"94","DOI":"10.1109\/MC.2010.84","article-title":"Web filtering and censoring","volume":"43","author":"Chen","year":"2010","journal-title":"Computer"},{"key":"2021081707162340300_bib70","doi-asserted-by":"crossref","first-page":"1142","DOI":"10.1177\/1461444811398031","article-title":"The end of the net as we know it? Deep packet inspection and Internet governance","volume":"13","author":"Bendrath","year":"2011","journal-title":"New Media Soc"},{"key":"2021081707162340300_bib71","doi-asserted-by":"crossref","DOI":"10.1145\/2068816.2068818","article-title":"Analysis of country-wide Internet outages caused by censorship","volume-title":"Proceedings of the 2011 ACM SIGCOMM Internet Measurement Conference","author":"Dainotti","year":"2011"},{"key":"2021081707162340300_bib72","doi-asserted-by":"crossref","DOI":"10.1145\/2663716.2663720","article-title":"Censorship in the wild: analyzing Internet filtering in Syria","volume-title":"Proceedings of the 2014 Internet Measurement Conference","author":"Chaabane","year":"2014"},{"key":"2021081707162340300_bib73","article-title":"Iran leaks censorship via BGP hijacks","volume-title":"Oracle DYN","author":"Madory","year":"2017"},{"key":"2021081707162340300_bib74","doi-asserted-by":"crossref","first-page":"47","DOI":"10.1111\/j.1475-4967.2008.00368.x","article-title":"Iran's foreign policy in post invasion Iraq","volume":"15","author":"Barzegar","year":"2008","journal-title":"Middle East Policy"},{"key":"2021081707162340300_bib76","article-title":"Iran: exporting the Internet","volume-title":"Oracle DYN","author":"Cowie","year":"2010"},{"key":"2021081707162340300_bib75","doi-asserted-by":"crossref","first-page":"295","DOI":"10.1080\/01436599308420326","article-title":"A de facto Kurdish state in Northern Iraq","volume":"14","author":"Gunter","year":"1993","journal-title":"Third World Quarterly"}],"container-title":["Journal of Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/academic.oup.com\/cybersecurity\/article-pdf\/7\/1\/tyab018\/39765655\/tyab018.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"http:\/\/academic.oup.com\/cybersecurity\/article-pdf\/7\/1\/tyab018\/39765655\/tyab018.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,8,17]],"date-time":"2021-08-17T07:18:21Z","timestamp":1629184701000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/cybersecurity\/article\/doi\/10.1093\/cybsec\/tyab018\/6353268"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,1]]},"references-count":76,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2021,8,17]]}},"URL":"https:\/\/doi.org\/10.1093\/cybsec\/tyab018","relation":{},"ISSN":["2057-2085","2057-2093"],"issn-type":[{"value":"2057-2085","type":"print"},{"value":"2057-2093","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2021,1,1]]},"published":{"date-parts":[[2021,1,1]]},"article-number":"tyab018"}}