Patent ID: 8327444

Claim:
A computing-device implemented method, comprising: obtaining, by a processor and from a Border Gateway Protocol (BGP) speaker, a list of autonomous system paths (AS-paths); selecting, by the processor, an AS-path from the list of AS-paths; determining, by the processor, a suspicion score for the AS-path, the suspicion score being based on a comparative analysis of connectedness of each autonomous system in the AS-path, the determining including: determining an origin degree for each autonomous system in the AS-path; comparing the origin degree of a first adjacent autonomous system in the AS-path with each subsequent autonomous system in the AS-path; and summing percentage increase values determined by comparing the origin degree of the first adjacent autonomous system in the AS-path with each subsequent autonomous system in the AS-path; comparing, by the processor, the suspicion score to a threshold value; and providing, by the processor, an indication that the AS-path is a suspicious AS-path when the suspicion score exceeds the threshold value.