ByzRP解决方案：为RPKI验证者提供全球运营保障.pdf

1、#BHAS BlackHatEventsThe ByzRP SolutionA Global Operational Shield for RPKI ValidatorsJens Friess|Donika Mirdita|Haya Schulmann|Michael Waidner#BHAS BlackHatEventsBGPThe Achilles Heel of the Internet#BHAS BlackHatEventsBorder Gateway Protocol(BGP)is the defacto inter-domain routing protocol.It priori

2、tizes:ScalabilityEfficiencySpeedNotes from the IETF Cafeteria,1989#BHAS BlackHatEventsNotes from the IETF Cafeteria,1989Border Gateway Protocol(BGP)is the defacto inter-domain routing protocol.It prioritizes:ScalabilityEfficiencySpeedSecurity#BHAS BlackHatEventsLong History of BGP Routing Hijacks.#B

3、HAS BlackHatEventsBGP Route Announcement#BHAS BlackHatEventsForwarding Neighboring Announcement#BHAS BlackHatEventsBGP Prefix Hijack#BHAS BlackHatEventsBGP Prefix Hijack#BHAS BlackHatEventsRPKIResource Public Key Infrastructure#BHAS BlackHatEventsRPKI:Cryptographic Objects in Publication Points#BHAS

4、 BlackHatEventsRPKI:Objects Collected by Relying Party#BHAS BlackHatEventsRPKI:Validated Objects Sent to Router#BHAS BlackHatEventsRPKI:Validated ROA Payloads(VRPs)#BHAS BlackHatEventsRPKI:VRPs to Verify BGP Announcements#BHAS BlackHatEventsRPKI-the most promising BGP security add-on#BHAS BlackHatEv

5、entsRPKI-the most promising BGP security add-on#BHAS BlackHatEventsRPKI-the most promising BGP security add-on#BHAS BlackHatEventsByzRPOperational Shieldfor RPKI#BHAS BlackHatEventsMalicious Publication PointsCrashing&Stalling Attacks#BHAS BlackHatEventsObjects Stored in Publication Points,Validated

6、 by Relying Party#BHAS BlackHatEventsrpki-byzrp-2Stalling Attacks#BHAS BlackHatEventsrpki-byzrp-2Stalling Attackshttps:/ BlackHatEventsDoS Attacks#BHAS BlackHatEventshttps:/ Attacks#BHAS BlackHatEventsByzRP:Watchdog#BHAS BlackHatEventsByzRP:Watchdog#BHAS BlackHatEventsByzRP:Watchdog#BHAS BlackHatEve