The present invention provides a method and
system for detecting prefix hijacking for uncertain sources. The method comprises: obtaining data from the routing information base, resource
public key infrastructure, and Internet routing registry in the
Border Gateway Protocol; constructing prefix cloud droplets from the time, space, and
data source dimensions based on cloud model theory, and deriving deterministic data and
uncertain data based on the discreteness of the cloud model; performing spatiotemporal stability analysis on the deterministic data, dynamically scoring each prefix
cloud droplet, and establishing a dynamic deterministic information base; for the
uncertain data, performing online
route detection using a custom dictionary tree; utilizing prefix coverage and matching rules in combination with a dual
verification mechanism to determine whether the
route is legitimate, thereby completing
anomaly detection and online updating. The present invention proposes a prefix hijacking detection method based on cloud model theory and a
Trie tree to overcome the characteristics of the
Border Gateway Protocol, such as dynamic changes, complex and large-scale networks, and
uncertain data.