How Effective is Multiple-Vantage-Point Domain Control Validation?. (arXiv:2302.08000v1 [cs.CR])

Multiple-vantage-point domain control validation (multiVA) is an emerging
defense for mitigating BGP hijacking attacks against certificate authorities.
While the adoption of multiVA is on the rise, little work has quantified its
effectiveness against BGP hijacks in the wild. We bridge the gap by presenting
the first analysis framework that measures the security of a multiVA deployment
under real-world network configurations (e.g., DNS and RPKI). Our framework
accurately models the attack surface of multiVA by 1) considering the attacks
on DNS …

adoption analysis attack attacks attack surface bgp bridge certificate certificate authorities control defense deployment dns domain emerging framework gap hijacking network point rpki security under validation vantage work world