Privacy preserving and resilient RPKI

AutorShrishak, K.; Shulman, H.
ArtConference Paper
AbstraktResource Public Key Infrastructure (RPKI) is vital to the security of inter-domain routing. However, RPKI enables Regional Internet Registries (RIRs) to unilaterally takedown IP prefixes - indeed, such attacks have been launched by nation-state adversaries. The threat of IP prefix takedowns is one of the factors hindering RPKI adoption.In this work, we propose the first distributed RPKI system, based on threshold signatures, that requires the coordination of a number of RIRs to make changes to RPKI objects; hence, preventing unilateral prefix takedown. We perform extensive evaluations using our implementation demonstrating the practicality of our solution. Furthermore, we show that our system is scalable and remains efficient even when RPKI is widely deployed.
KonferenzConference on Computer Communications (INFOCOM) <2021, Online>
ReferenzIEEE INFOCOM 2021, IEEE Conference on Computer Communications: Vancouver, British Columbia, Canada 10 - 13 May 2021. Piscataway, NJ: IEEE, 2021, pp. 2065-2074
SchlüsselISBN : 9780738112817