To effectively secure BGP routing, SIDR leverages three components: As noted by the official NIST website, the two agencies are jointly sponsoring the 2018 Global City Teams Challenge, which aims to improve the security, resiliency and reliability of smart city systems.įor BGP security, NIST and DHS created the Secure Inter-Domain Routing (SIDR) framework, which has been in development for several years but just recently began rolling out on the Internet Engineerinng Task Force (ITEF) portal. NIST and DHS are no strangers to teaming up.
Information is sent somewhere without incident - the destination is simply altered. Enterprises may not be aware that data security has been compromised because no errors would have been reported. Data is then sent directly to attacker-controlled routers and servers.Įven worse, BGP lacks basic security services. When one large network needs to route data to another, BGP tells routers which IP blocks are available on the destination network and which are the most reliable.įraudsters can compromise this process by advertising available IP blocks that don’t actually exist on legitimate networks. So what’s in a BGP breach? The idea is to subvert BGP’s purpose. As a result, BGP hijacks are now, as Wired put it, “the internet’s biggest security hole.” This prompted two government agencies - the National Institute of Standards and Technology (NIST) and the Department of Homeland Security (DHS) - to team up and develop a new set of security standards to close border gateway loopholes. The protocol was developed in the late 1980s, when data security wasn’t top of mind for emerging internet entities.
The problem is that, as noted by Bleeping Computer, BGP security is lacking. How do large internet entities such as internet service providers (ISPs), cloud providers and national networks communicate with each other? They use border gateway protocol (BGP).
0 kommentar(er)
