{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T00:59:21Z","timestamp":1784595561712,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","funder":[{"name":"Fundamental Research Funds for Central Universities","award":["2024ZCJH12"],"award-info":[{"award-number":["2024ZCJH12"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,9,8]]},"DOI":"10.1145\/3748496.3748993","type":"proceedings-article","created":{"date-parts":[[2025,8,20]],"date-time":"2025-08-20T13:21:07Z","timestamp":1755696067000},"page":"13-20","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["BGPFlow: Flow-based Feature Extraction for BGP Anomaly Detection"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-1798-9907","authenticated-orcid":false,"given":"Yanxu","family":"Fu","sequence":"first","affiliation":[{"name":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9789-7277","authenticated-orcid":false,"given":"Pei","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4429-9959","authenticated-orcid":false,"given":"Han","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China and Zhongguancun Laboraory, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7275-2274","authenticated-orcid":false,"given":"Xiaohong","family":"Huang","sequence":"additional","affiliation":[{"name":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8065-591X","authenticated-orcid":false,"given":"Yan","family":"Ma","sequence":"additional","affiliation":[{"name":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4009-6601","authenticated-orcid":false,"given":"Kun","family":"Xie","sequence":"additional","affiliation":[{"name":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2779-240X","authenticated-orcid":false,"given":"Dandan","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,9,8]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/3651890.3672251"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2622240"},{"key":"e_1_3_2_1_3_1","unstructured":"catchpoint. 2022. The Comprehensive Guide to BGP. Technical Report. Catchpoint Systems. https:\/\/resources.catchpoint.com\/hubfs\/eBooks\/TheComprehensiveGuidetoBGP.pdf"},{"key":"e_1_3_2_1_4_1","unstructured":"Yihao Chen Qilei Yin Qi Li Zhuotao Liu Ke Xu Yi Xu Mingwei Xu Ziqian Liu and Jianping Wu. 2024. Learning with semantics: Towards a semantics-aware routing anomaly detection system. 5143--5160. https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/chen-yihao"},{"key":"e_1_3_2_1_5_1","unstructured":"Catalin Cimpanu. 2020. CenturyLink outage led to a 3.5% drop in global web traffic. (2020). https:\/\/www.zdnet.com\/home-and-office\/networking\/centurylink-outage-led-to- a-3-5-drop-in-global-web-traffic\/"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/263109.263151"},{"key":"e_1_3_2_1_7_1","volume-title":"KT suffers major network outage nationwide. (Oct","author":"Kim","year":"2021","unstructured":"Kim Da-sol. 2021. KT suffers major network outage nationwide. (Oct. 2021). https:\/\/www.koreaherald.com\/article\/2713348 Section: The Korea Herald."},{"key":"e_1_3_2_1_8_1","unstructured":"DB-IP. [n. d.]. IP geolocation API & free address database | DB-IP. ([n. d.]). https:\/\/db-ip.com\/"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP52444.2021.9651957"},{"key":"e_1_3_2_1_10_1","unstructured":"MaxMind GeoIP. [n. d.]. MaxMind GeoIP\u00ae databases | MaxMind. ([n. d.]). https:\/\/www.maxmind.com\/en\/geoip-databases"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/3691825.3691921"},{"key":"e_1_3_2_1_12_1","unstructured":"IP2Location. [n. d.]. Free IP geolocation database. ([n. d.]). https:\/\/lite.ip2location.com\/"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1232919.1232921"},{"key":"e_1_3_2_1_14_1","volume-title":"BML: An Efficient and Versatile Tool for BGP Dataset Collection. In 2021 IEEE International Conference on Communications Workshops (ICC Workshops) (2021-06)","author":"Hoarau Kevin","year":"2021","unstructured":"Kevin Hoarau, Pierre Ugo Tournoux, and Tahiry Razafindralambo. 2021. BML: An Efficient and Versatile Tool for BGP Dataset Collection. In 2021 IEEE International Conference on Communications Workshops (ICC Workshops) (2021-06). 1--6."},{"key":"e_1_3_2_1_15_1","volume-title":"Kipf and Max Welling","author":"Thomas","year":"2016","unstructured":"Thomas N. Kipf and Max Welling. 2016. Variational Graph Auto-Encoders. (2016). arXiv:stat.ML\/1611.07308 https:\/\/arxiv.org\/abs\/1611.07308"},{"key":"e_1_3_2_1_16_1","unstructured":"Angelique Medina. 2021. Facebook outage analysis | ThousandEyes. (2021). https:\/\/www.thousandeyes.com\/blog\/facebook-outage-analysis"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/ITOEC49072.2020.9141762"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPSR.2012.6260835"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC47284.2019.8969619"},{"key":"e_1_3_2_1_20_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Qin Lancheng","year":"2022","unstructured":"Lancheng Qin, Dan Li, Ruifeng Li, and Kang Wang. 2022. Themis: Accelerating the Detection of Route Origin Hijacking by Distinguishing Legitimate and Illegitimate MOAS. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 4509--4524."},{"key":"e_1_3_2_1_21_1","unstructured":"RIPE. [n. d.]. Welcome to RIPE and the RIPE NCC. ([n. d.]). https:\/\/www.ripe.net\/"},{"key":"e_1_3_2_1_22_1","unstructured":"RouteViews. [n. d.]. RouteViews - University of Oregon RouteViews Project. ([n. d.]). https:\/\/www.routeviews.org\/routeviews\/"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2398776.2398779"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/JCN.2010.6391376"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2013.130616"}],"event":{"name":"SIGCOMM '25: ACM SIGCOMM 2025 Conference","location":"Coimbra Portugal","acronym":"SIGCOMM '25","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the 1st Workshop on Next-Generation Network Observability"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3748496.3748993","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T14:11:13Z","timestamp":1760019073000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3748496.3748993"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,8]]},"references-count":25,"alternative-id":["10.1145\/3748496.3748993","10.1145\/3748496"],"URL":"https:\/\/doi.org\/10.1145\/3748496.3748993","relation":{},"subject":[],"published":{"date-parts":[[2025,9,8]]},"assertion":[{"value":"2025-09-08","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}