poster

Public Access

Poster: Taking the Low Road: How RPKI Invalids Propagate

Authors:

Ben Du,

Cecilia Testart,

Romain Fontugne,

Alex C. Snoeren,

Kc ClaffyAuthors Info & Claims

ACM SIGCOMM '23: Proceedings of the ACM SIGCOMM 2023 Conference

Pages 1144 - 1146

https://doi.org/10.1145/3603269.3610843

Published: 01 September 2023 Publication History

PDF eReader

Abstract

The Border Gateway Protocol (BGP) includes no mechanism to verify the correctness of routing information exchanged between networks. To defend against unauthorized use of address space, the IETF developed the Resource Public Key Infrastructure (RPKI), a cryptographically attested database system that facilitates validation of BGP messages. Networks can use RPKI to check whether the Autonomous System (AS) at the origin of the AS path in a BGP announcement is authorized to originate the IP prefixes being announced.

References

[1]

Taejoong Chung, Emile Aben, Tim Bruijnzeels, Balakrishnan Chandrasekaran, David Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, Roland van Rijswijk-Deij, John Rula, and Nick Sullivan. 2019. RPKI is Coming of Age: A Longitudinal Study of RPKI Deployment and Invalid Route Origins. In Proceedings of the Internet Measurement Conference (Amsterdam, Netherlands) (IMC '19). Association for Computing Machinery, New York, NY, USA, 406--419.

Digital Library

Google Scholar

[2]

Ben Du, Gautam Akiwate, Thomas Krenc, Cecilia Testart, Alexander Marder, Bradley Huffaker, Alex C Snoeren, and KC Claffy. 2022. IRR Hygiene in the RPKI Era. In International Conference on Passive and Active Network Measurement. Springer, 321--337.

Google Scholar

[3]

Ben Du, Cecilia Testart, Romain Fontugne, Gautam Akiwate, Alex C. Snoeren, and kc claffy. 2022. Mind Your MANRS: Measuring the MANRS Ecosystem. In Proceedings of the 22nd ACM Internet Measurement Conference (Nice, France) (IMC '22). Association for Computing Machinery, New York, NY, USA, 716--729.

Google Scholar

[4]

Romain Fontugne, Anant Shah, and Emile Aben. 2018. The (thin) bridges of as connectivity: Measuring dependency using as hegemony. In International Conference on Passive and Active Network Measurement. Springer, 216--227.

Crossref

Google Scholar

[5]

Geoff Huston and Joao Damas. 2020. Measuring Route Origin Validation. https://www.potaroo.net/ispcol/2020-06/rov.html

Google Scholar

[6]

Internet Initiative Japan. 2023. Internet Health Report. ttps://ihr.iijlab.net/ihr/en-us/rov

Google Scholar

[7]

Kevin Klercq, Willem Toorop, and Koen van Hove. 2023. ImpROVement. RIPE 86. https://ripe86.ripe.net/wp-content/uploads/presentations/144-ImpROVement.pdf

Google Scholar

[8]

Cecilia Testart, Philipp Richter, Alistair King, Alberto Dainotti, and David Clark. 2020. To Filter or not to Filter: Measuring the Benefits of Registering in the RPKI Today. In International Conference on Passive and Active Network Measurement. Springer, 71--87.

Crossref

Google Scholar

Cited By

View all

Du BFontugne RTestart CSnoeren Aclaffy kVallina-Rodríguez NSuarez-Tángil GLevin DPelsser C(2024)Sublet Your Subnet: Inferring IP Leasing in the WildProceedings of the 2024 ACM on Internet Measurement Conference10.1145/3646547.3689010(328-336)Online publication date: 4-Nov-2024
https://dl.acm.org/doi/10.1145/3646547.3689010
Rodday NCunha ÍBush RKatz-Bassett ERodosek GSchmidt TWählisch M(2024)The Resource Public Key Infrastructure (RPKI): A Survey on Measurements and Future ProspectsIEEE Transactions on Network and Service Management10.1109/TNSM.2023.332745521:2(2353-2373)Online publication date: Apr-2024
https://doi.org/10.1109/TNSM.2023.3327455
Clark DTestart CLuckie Mclaffy k(2024)A path forward: improving Internet routing security by enabling zones of trustJournal of Cybersecurity10.1093/cybsec/tyae02310:1Online publication date: 14-Dec-2024
https://doi.org/10.1093/cybsec/tyae023
Show More Cited By

Index Terms

Poster: Taking the Low Road: How RPKI Invalids Propagate
1. Networks
  1. Network performance evaluation
    1. Network measurement
  2. Network properties
    1. Network security

Recommendations

RoVista: Measuring and Analyzing the Route Origin Validation (ROV) in RPKI
IMC '23: Proceedings of the 2023 ACM on Internet Measurement Conference

The Resource Public Key Infrastructure (RPKI) is a system to add security to the Internet routing. In recent years, the publication of Route Origin Authorization (ROA) objects, which bind IP prefixes to their legitimate origin ASN, has been rapidly ...
Behind the Scenes of RPKI
CCS '22: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security

Best practices for making RPKI resilient to failures and attacks recommend using multiple URLs and certificates for publication points as well as multiple relying parties. We find that these recommendations are already supported by 63% of the ASes with ...
RPKI vs ROVER: comparing the risks of BGP security solutions
SIGCOMM '14: Proceedings of the 2014 ACM conference on SIGCOMM

BGP, the Internet's interdomain routing protocol, is highly vulnerable to routing failures that result from unintentional misconfigurations or deliberate attacks. To defend against these failures, recent years have seen the adoption of the Resource ...

Comments

Information & Contributors

Information

Published In

ACM SIGCOMM '23: Proceedings of the ACM SIGCOMM 2023 Conference

September 2023

1217 pages

ISBN:9798400702365

DOI:10.1145/3603269

Chairs:
Henning Schulzrinne,
Vishal Misra,
Program Chairs:
Eddie Kohler,
David Maltz

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the owner/author(s).

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 01 September 2023

Check for updates

Author Tags

Qualifiers

Poster

Funding Sources

US NSF

Conference

ACM SIGCOMM '23

Sponsor:

SIGCOMM

ACM SIGCOMM '23: ACM SIGCOMM 2023 Conference

September 10, 2023

NY, New York, USA

Acceptance Rates

Overall Acceptance Rate 462 of 3,389 submissions, 14%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

4
Total Citations
View Citations
178
Total Downloads

Downloads (Last 12 months)103
Downloads (Last 6 weeks)11

Reflects downloads up to 26 Dec 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Du BFontugne RTestart CSnoeren Aclaffy kVallina-Rodríguez NSuarez-Tángil GLevin DPelsser C(2024)Sublet Your Subnet: Inferring IP Leasing in the WildProceedings of the 2024 ACM on Internet Measurement Conference10.1145/3646547.3689010(328-336)Online publication date: 4-Nov-2024
https://dl.acm.org/doi/10.1145/3646547.3689010
Rodday NCunha ÍBush RKatz-Bassett ERodosek GSchmidt TWählisch M(2024)The Resource Public Key Infrastructure (RPKI): A Survey on Measurements and Future ProspectsIEEE Transactions on Network and Service Management10.1109/TNSM.2023.332745521:2(2353-2373)Online publication date: Apr-2024
https://doi.org/10.1109/TNSM.2023.3327455
Clark DTestart CLuckie Mclaffy k(2024)A path forward: improving Internet routing security by enabling zones of trustJournal of Cybersecurity10.1093/cybsec/tyae02310:1Online publication date: 14-Dec-2024
https://doi.org/10.1093/cybsec/tyae023
Du BIzhikevich KRao SAkiwate GTestart CSnoeren Aclaffy kMontpetit MLeivadeas AUhlig SJaved M(2023)IRRegularities in the Internet Routing RegistryProceedings of the 2023 ACM on Internet Measurement Conference10.1145/3618257.3624843(104-110)Online publication date: 24-Oct-2023
https://dl.acm.org/doi/10.1145/3618257.3624843

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Index Terms

Recommendations

RoVista: Measuring and Analyzing the Route Origin Validation (ROV) in RPKI

Behind the Scenes of RPKI

RPKI vs ROVER: comparing the risks of BGP security solutions

Comments

Published In

Sponsors

Publisher

Publication History

Check for updates

Author Tags

Qualifiers

Funding Sources

Conference

Acceptance Rates

Other Metrics

Article Metrics

Other Metrics

Cited By

PDF

eReader

Login options

Full Access

Abstract

References

Cited By

Index Terms

Recommendations

RoVista: Measuring and Analyzing the Route Origin Validation (ROV) in RPKI

Behind the Scenes of RPKI

RPKI vs ROVER: comparing the risks of BGP security solutions

Comments

Information

Published In

Sponsors

Publisher

Publication History

Check for updates

Author Tags

Qualifiers

Funding Sources

Conference

Acceptance Rates

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

View options

PDF

eReader

Login options

Full Access

Figures

Other

Share

Share this Publication link

Share on social media

Affiliations