The internet has about 74,000 networks called Autonomous Systems (ASes) that work together1. These networks use the Border Gateway Protocol (BGP) to share important routing info. But, BGP lacks security, making it vulnerable to attacks like unauthorized announcements and lack of message checks1. For over 25 years, experts have worried about these BGP weaknesses1.
Securing Federal Internet: Keeping the federal internet safe is very important. Cyberattacks and data breaches are big threats. Our federal agencies must protect their networks and systems well. They need to use strong security, check for weaknesses often, and use the latest tech. This helps keep services like healthcare and defense safe and working well.
Government Internet Security: Government agencies face big risks online. They need to keep their networks safe for important work and talking to citizens. To fight cyber threats, they must use many security tools. Things like firewalls and encryption are key. Training employees to stay safe online is also crucial. This helps protect sensitive info and keeps national interests safe.
Industry Routing Solutions: Industry routing solutions are vital for moving important data well. Companies with big networks need good routing to work fast and smoothly. New tech like SDN and NFV make this easier. These solutions also help fight cyber threats. They keep networks and systems safe from harm.
The Biden administration has launched a plan to fix these problems2. This Roadmap to Enhance Internet Routing Security was made with the ONCD, government partners, and industry leaders2. It includes 18 steps to make internet routing safer, with a big push for using Resource Public Key Infrastructure (RPKI) to fight BGP threats2.
Taejoong “Tijay” Chung, a computer science professor at Virginia Tech, is key in the U.S. fight against these threats. His work, mentioned by the FCC and NTIA, includes creating RoVISTA. This tool helps track RPKI use in real-time. It’s vital as the government and industry aim to protect internet routing for everyone.
Introduction to Internet Routing Vulnerabilities
The internet is made up of about 74,000 networks called Autonomous Systems (ASes). They use the Border Gateway Protocol (BGP) to share routing info3. But, BGP can’t check if a network is real, if messages are safe, or if info is true3.
Complexity of Internet Routing and Associated Risks
The internet has grown a lot in the last 20 years. This growth has shown the weaknesses in BGP. These weaknesses have caused problems like data theft and service outages3. In 2003, the White House said internet routing issues were a big risk3.
Lack of Adequate Security in BGP Protocol
The Border Gateway Protocol (BGP) is a big worry for network security3. Even though the U.S. has a lot of internet address resources, not many use security measures3. The 2023 National Cybersecurity Strategy says BGP security is a big problem. It asks federal agencies to do more3.
The internet’s routing system is complex and has big security risks. We need better security to stop problems like data breaches and attacks345.
Securing Internet Routing: A National Cybersecurity Priority
The 2023 National Cybersecurity Strategy has made securing the internet’s technical foundation a key goal6. The Office of the National Cyber Director (ONCD) is working on a plan to boost the use of secure internet routing. They aim to tackle security issues, find ways to fix them, and understand why some solutions are hard to use7.
Internet routing, especially the Border Gateway Protocol (BGP), is vital to the internet. But, it has weaknesses that hackers can use to steal IP addresses and disrupt traffic. The government sees fixing these problems as a key part of its cybersecurity plan6.
The ONCD’s plan includes 18 steps to tackle BGP’s security issues7. They suggest using secure methods like Resource Public Key Infrastructure (RPKI) for better internet security. They also plan to create a group of experts from both the public and private sectors to work together on internet security7.
By focusing on internet routing security, the government is making a big step towards better cybersecurity for the country7. This move will help prevent big problems and keep the nation safe from BGP’s weaknesses7.
The ONCD’s roadmap is a big step in the government’s effort to secure the internet’s foundation7. It shows that the government sees internet routing security as a top priority. It also highlights the need for teamwork between the government and the private sector to solve these big challenges7.
Baseline Approaches: RPKI, ROA, and ROV
To fix the problems in the Border Gateway Protocol (BGP), we have RPKI, ROAs, and ROV. These are key steps to make internet routing safer8. RPKI lets network owners show who can send out certain IP addresses. ROAs and ROV check if these claims are true8.
These tools help make internet routing safer. But, they are not used by everyone yet.
Understanding RPKI, ROA, and ROV
RPKI is key for internet routing security. It sets up a trusted system for checking BGP route announcements8. ROAs are digital certificates that show who can send out certain IP addresses8.
ROV checks if BGP route announcements match the ROAs. This helps networks spot and block bad or wrong routes.
Advantages and Limitations
RPKI, ROAs, and ROV have helped fix some internet routing problems89. But, getting them used everywhere has been hard. Only networks use RPKI filtering10.
ROV is getting more use, but it’s not perfect. Bad routes can still get through at Internet Exchange Points (IXPs). Not enough places use it10. We need to keep working to make these tools better and get more people using them.
Challenges to RPKI Adoption
RPKI, ROA, and ROV are strong security tools for the internet. Yet, they are not used by many. Network operators might not see the need for them, thinking the risk is low11. Also, setting them up can be hard due to lack of resources and barriers like getting everyone to work together11.
Prioritization, Resourcing, and Risk Perception
For many, making the internet safer is not a big deal. They have other things to worry about. But, the truth is, over 3,000 attacks happened in 202012.
Using RPKI, ROA, and ROV takes a lot of work. Small places might not have the time or people to do it. This is especially true since funding changes at ARIN in 202411.
Leaders don’t always get how important internet safety is. This makes it hard to get the help and money needed for RPKI11.
To solve these problems, we need to see the dangers of the internet. We must make protecting it a key part of our safety plans. We need more awareness, money, and teamwork to make the internet safer for everyone1112.
Current Progress and Industry Efforts
Despite challenges, there’s been significant progress in making the internet safer. Groups like Mutually Agreed Norms for Routing Security (MANRS)13 and the Global Cyber Alliance have pushed for better security. They offer advice to network operators13.
These groups and others are helping to improve internet security. CableLabs has created the Routing Security Profile (RSP)14. It follows the Cybersecurity Framework and helps networks get safer14.
The RSP has become a key tool for the government and other projects. The NTIA’s C-SCRIP project and the FCC’s BGP rules see its value14.
This teamwork shows the industry’s dedication to fixing BGP’s problems13. They aim to make the internet safer and more reliable13.
Federal Government Initiatives
The federal government is taking steps to improve internet routing security15. They aim to protect America’s communications networks and critical infrastructure. They focus on fixing vulnerabilities in the Border Gateway Protocol (BGP), which is key to the internet15.
BGP lacks security features, making it vulnerable to attacks. These attacks can redirect internet traffic15.
National Cybersecurity Strategy Roadmap
The government has a plan to make internet routing more secure15. They see the big impact of BGP issues on important sectors like transportation and energy. They’ve set up a Commission to boost communications security for defense and safety15.
NTIA’s Role in Promoting Routing Security
The National Telecommunications and Information Administration (NTIA) is key in routing security16. They work with others to add security features, like Route Origin Authorizations (ROAs). They also help federal agencies use the Resource Public Key Infrastructure (RPKI) framework16.
As agencies use TIC 3.0, they must work with the NCPS Program. This is to share the right information with CISA16.
The government is serious about making internet routing secure. They’re using their National Cybersecurity Strategy and NTIA’s help. This is to protect the nation’s networks and keep its infrastructure strong151617.
Securing Internet Routing
Securing internet routing is key to keeping our online world safe. The Border Gateway Protocol (BGP) has weaknesses, and the internet’s complex structure makes it hard to protect. Securing internet routing needs a mix of security tools and teamwork between governments, industries, and others.
The Department of Commerce is leading the charge in making the internet safer18. The National Oceanic and Atmospheric Administration’s N-Wave network was the first to use strong routing security18. Also, over 60% of the Federal government’s IP space is set to have the needed security by the end of the year19.
The Communications Supply Chain Risk Information Partnership (C-SCRIP) helps small telecom providers stay safe online18. They’re hosting a webinar with ARIN on September 24 at 3:00pm EDT to teach about ROAs18.
The Office of the National Cyber Director (ONCD) is working on BGP security measures and internet routing protection with CISA and industry partners19. This team effort is vital for making the internet’s routing system more secure and reliable.
Recommended Actions for Stakeholders
To keep the internet safe, we need to act fast. Network operators and service providers are key in making the internet more secure20.
Baseline Actions for Network Operators
Network operators must start with basic security steps. They should use the Resource Public Key Infrastructure (RPKI), Route Origin Authorizations (ROAs), and Route Origin Validation (ROV)20. They also need to join efforts like the Mutually Agreed Norms for Routing Security (MANRS) initiative20.
Additional Actions for Service Providers
Service providers can do more to secure the internet. They should show how they use RPKI and push for more security among their customers20. They must also keep up with security updates, audits, and firewall settings21.
By following these steps, we can make the internet safer. This will protect businesses, people, and important areas from BGP threats20.
Conclusion
Keeping the internet safe is a top priority for the country. It needs teamwork from the government, businesses, and others22. Researchers, the Biden team, and companies are working hard to fix the internet’s weak spots23.
By using security tools like RPKI22 and working together, the U.S. can make its online world safer. This will help protect everyone from dangers in the internet’s paths24.
The way the internet works today is based on trust between different networks23. It’s very important to make this trust stronger22. Tools like RPKI help check who is sending data and stop bad things from happening22.
As the internet grows, working together to keep it safe will be key. This will protect users, important services, and the whole digital world from threats24. By acting early and using good solutions, the U.S. can keep its internet safe and sound for the future23.
FAQ
What is the Biden administration’s Roadmap to Enhance Internet Routing Security?
What are the vulnerabilities in the Border Gateway Protocol (BGP) that the roadmap aims to address?
What security protocols are being promoted to address the vulnerabilities in internet routing?
What are the challenges to widespread adoption of RPKI, ROA, and ROV?
What is the federal government’s role in addressing internet routing security?
What are the recommended actions for different stakeholders to secure internet routing?
Source Links
- https://www.whitehouse.gov/wp-content/uploads/2024/09/Roadmap-to-Enhancing-Internet-Routing-Security.pdf – PDF
- https://www.whitehouse.gov/oncd/briefing-room/2024/09/03/fact-sheet-biden-harris-administration-releases-roadmap-to-enhance-internet-routing-security/ – Fact Sheet: Biden-Harris Administration Releases Roadmap to Enhance Internet Routing Security | ONCD | The White House
- https://www.commerce.gov/news/press-releases/2024/05/us-department-commerce-implements-internet-routing-security – U.S. Department of Commerce Implements Internet Routing Security
- https://www.internetsociety.org/blog/2024/09/white-house-roadmap-tackles-routing-vulnerabilities/ – US Government Networks Get a Security Boost: White House Roadmap Tackles Routing Vulnerabilities – Internet Society
- https://www.networkcomputing.com/wan-networks/white-house-road-map-provides-guidance-on-bgp-internet-routing-security – White House Road Map Provides Guidance on BGP Internet Routing Security
- https://news.vt.edu/articles/2024/10/virginia-tech-carilion-school-of-medicine-receives-recognition-f/internet-routing-federal-priority.html – Securing internet routing becomes federal priority: Expert provides real-time tools for industry and government
- https://www.whitehouse.gov/oncd/briefing-room/2024/09/03/press-release-white-house-office-of-the-national-cyber-director-releases-roadmap-to-enhance-internet-routing-security/ – Press Release: White House Office of the National Cyber Director Releases Roadmap to Enhance Internet Routing Security | ONCD | The White House
- https://www.meritalk.com/articles/oncd-creates-new-working-group-to-bolster-internet-routing-security/ – ONCD Creates new Working Group to Bolster Internet Routing Security
- https://www.cablelabs.com/blog/internet-routing-security-framework – A Framework for Improving Internet Routing Security
- https://www.usenix.org/system/files/usenixsecurity23-hlavacek.pdf – PDF
- https://manrs.org/2023/11/the-challenges-of-rpki-roa-diffusion-in-research-and-education/ – The Challenges of RPKI-ROA Diffusion in Research and Education – MANRS
- https://blog.cloudflare.com/rpki-updates-data – Helping build a safer Internet by measuring BGP RPKI Route Origin Validation
- https://blog.cloudflare.com/white-house-routing-security – Making progress on routing security: the new White House roadmap
- https://www.cablelabs.com/blog/cablelabs-updates-framework-for-improving-internet-routing-security – CableLabs Updates Framework for Improving Internet Routing Security
- https://www.federalregister.gov/documents/2022/03/11/2022-05121/secure-internet-routing – Secure Internet Routing
- https://www.cisa.gov/resources-tools/programs/trusted-internet-connections-tic – Trusted Internet Connections (TIC) | CISA
- https://www.gsa.gov/technology/it-contract-vehicles-and-purchasing-programs/information-technology-category/it-security/trusted-internet-connections – Trusted internet connections
- https://www.ntia.gov/blog/2024/roadmap-enhancing-internet-routing-security – The Roadmap to Enhancing Internet Routing Security
- https://therecord.media/white-house-bgp-hard-problem-guidance – White House calls attention to ‘hard problem’ of securing internet traffic routing
- https://www.cisa.gov/news-events/news/most-important-part-internet-youve-probably-never-heard – The Most Important Part of the Internet You’ve Probably Never Heard Of | CISA
- https://www.checkpoint.com/cyber-hub/network-security/what-is-firewall/8-firewall-best-practices-for-securing-the-network/ – 8 Firewall Best Practices for Securing the Network – Check Point Software
- https://blog.afrinic.net/rpki-quick-introduction – Securing Internet Routing with Cryptography: Quick Introduction to RPKI
- https://web.cs.ucla.edu/~lixia/papers/routesec.pdf – PDF
- https://cacm.acm.org/research/securing-internet-applications-from-routing-attacks/ – Securing Internet Applications from Routing Attacks – Communications of the ACM