SAT-91 Monitoring And Analyzing The Deployment Of Resource Public Key Infrastructure (RPKI) Within The Internet

Saturday, October 13, 2012: 2:20 AM
Hall 4E/F (WSCC)
Luis Perez Cruz, BS , Computer Science, University of Puerto Rico, Bayamon Campus, Bayamon, PR
Oliver Borchert , NIST, Gaithersburg, MD
The Border Gateway Protocol (BGP) is an Internet protocol that allows the exchange of routing information between different autonomous systems (AS). It keeps a logical table that states the path that a certain AS needs to follow in order to reach a specific IP address owned by another AS. Over the past few years, misconfigurations and malicious attacks against BGP routers have resulted in sending routing information to the wrong direction. As a by-product, portions of the Internet have been knocked down, causing large losses to different Internet-based companies and placing sensitive information in danger. RPKI is an infrastructure designed to secure routing processes on the Internet.  It contains Route Origination Authorization (ROA) objects that allow the router to verify whether a certain AS is authorized to announce a block of IP addresses. This project aims to present an analysis of routing information downloaded from RouteViews on a daily basis and to determine its validity by comparing it against ROA objects downloaded on the same day. The objective is to build a web application that displays different graphs and statistics that will show how wide the RPKI is deployed, its characteristics and how much percentage of the routing information collected can be verified.  The goal is to monitor RPKI deployment and provide statistics useful for the internet community that will help to foster the infrastructure development and deployment process.