A system comprising a processor in electrical communication with a network and a non-transitory memory having instructions that, in response to an execution by the processor, cause the processor to monitor a routing information base (“RIB”) of the network, identify a change in the RIB, calculate a probability of suspiciousness of the change in the RIB, and classify the change in the RIB based on a continuum of trust are disclosed. Methods of managing routers are also disclosed.