Byzantine-Secure Relying Party for Resilient RPKI

arXiv:2405.00531v1 Announce Type: new
Abstract: To protect against prefix hijacks, Resource Public Key Infrastructure (RPKI) has been standardized. To enjoy the security guarantees of RPKI validation, networks need to install a new component, the relying party validator, which fetches and validates RPKI objects and provides them to border routers. However, recent work shows that relying parties experience failures when retrieving RPKI objects and are vulnerable to attacks, all of which can disable RPKI validation. Therefore even the few adopters are …

arxiv border cs.cr infrastructure install key networks party protect public public key resilient resource routers rpki security validation work