EE Seminar: Accurate Route Encoding for IP Hijack Detection and GeoIP Database Error Detection
הרישום לסמינר יבוצע בתחילת הסמינר באמצעות סריקת הברקוד למודל (יש להיכנס לפני כן למודל, לא באמצעות האפליקציה)
Registration to the seminar is done at the beginning of the seminar by scanning the barcode for the Moodle (Please enter ahead to the Moodle, NOT by application)
Electrical Engineering Systems Seminar
Speaker: Yonatan Sigal
M.Sc. student under the supervision of Prof. Yuval Shavitt
Monday, 12th January 2026, at 15:00
Room 011, Kitot Building, Faculty of Engineering
Accurate Route Encoding for IP Hijack Detection and GeoIP Database Error Detection
Abstract
The number of all possible Internet routes at the traceroute level seems so large that it seems impossible to create a meaningful encoding that will capture the entire route. In this work we show that this can be done when the hops are expressed by their country location and ASN. Namely, we encode the entire route by a single vector in a latent space and successfully decode the hop locations with high accuracy. We show the applicability of our encoding for two tasks: detection of routing attacks (IP deflection attacks) and detections of errors in geoIP databases. We trained an encoder-decoder on one dataset, and then successfully recreated routes from datasets the model has never
seen before with a hop accuracy of 99.31% for datasets with similar characteristics. For datasets with different characteristics, by using only 3.2% of the dataset for fine-tuning the decoder, we have reached a hop accuracy of 98.44%. Our encoder model was used for IP hijacking detection with very limited training and adjustments to reach a detection accuracy of 92.8%. We also show how the encoder-decoder can be used to detect errors in a geolocation database.
-סמינר זה ייחשב כסמינר שמיעה לתלמידי תואר שני ושלישי-
This Seminar Is Considered A Hearing Seminar For Msc/Phd Students-
