Keep Your Friends Close, but Your Routeservers Closer: Insights into RPKI Validation in the Internet. (arXiv:2303.11772v1 [cs.NI])

IP prefix hijacks allow adversaries to redirect and intercept traffic, posing
a threat to the stability and security of the Internet. To prevent prefix
hijacks, networks should deploy RPKI and filter bogus BGP announcements with
invalid routes.

In this work we evaluate the impact of RPKI deployments on the security and
resilience of the Internet. We aim to understand which networks filter invalid
routes and how effective that filtering is in blocking prefix hijacks. We
extend previous data acquisition and …

adversaries aim announcements bgp bogus filter friends impact insights intercept internet networks resilience rpki security threat traffic understand validation work