MaxLength considered harmful to the RPKI

Yossi Gilad; Omar Sagga; Sharon Goldberg

doi:10.1145/3143361.3143363

MaxLength considered harmful to the RPKI

Yossi Gilad, Omar Sagga, Sharon Goldberg

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

27 Scopus citations

Abstract

User convenience and strong security are often at odds, and most security applications need to find some sort of balance between these two (often opposing) goals. The Resource Public Key Infrastructure (RPKI), a security infrastructure built on top of interdomain routing, is not immune to this issue. The RPKI uses the maxLength attribute to reduce the amount of information that must be explicitly recorded in its cryptographic objects. MaxLength also allows operators to easily reconfigure their networks without modifying their RPKI objects. Our network measurements, however, suggest that the maxLength attribute strikes the wrong balance between security and user convenience. We therefore believe that operators should avoid using maxLength. We give operational recommendations and develop software that allow operators to reap many of the benefits of maxLength without its security costs.

Original language	English
Title of host publication	CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies
Publisher	Association for Computing Machinery, Inc
Pages	101-107
Number of pages	7
ISBN (Electronic)	9781450354226
DOIs	https://doi.org/10.1145/3143361.3143363
State	Published - 28 Nov 2017
Externally published	Yes
Event	13th International Conference on Emerging Networking EXperiments and Technologies, CoNEXT 2017 - Incheon, Korea, Republic of Duration: 12 Dec 2017 → 15 Dec 2017

Publication series

Name	CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies

Conference

Conference	13th International Conference on Emerging Networking EXperiments and Technologies, CoNEXT 2017
Country/Territory	Korea, Republic of
City	Incheon
Period	12/12/17 → 15/12/17

Bibliographical note

Publisher Copyright:
© 2017 ACM.

Keywords

Bgp
Interdomain routing security
RPKI

Access to Document

10.1145/3143361.3143363

Cite this

Gilad, Y., Sagga, O., & Goldberg, S. (2017). MaxLength considered harmful to the RPKI. In CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies (pp. 101-107). (CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies). Association for Computing Machinery, Inc. https://doi.org/10.1145/3143361.3143363

Gilad, Yossi ; Sagga, Omar ; Goldberg, Sharon. / MaxLength considered harmful to the RPKI. CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies. Association for Computing Machinery, Inc, 2017. pp. 101-107 (CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies).

@inproceedings{07fb36baf19043d6b04f8d00ac474624,

title = "MaxLength considered harmful to the RPKI",

abstract = "User convenience and strong security are often at odds, and most security applications need to find some sort of balance between these two (often opposing) goals. The Resource Public Key Infrastructure (RPKI), a security infrastructure built on top of interdomain routing, is not immune to this issue. The RPKI uses the maxLength attribute to reduce the amount of information that must be explicitly recorded in its cryptographic objects. MaxLength also allows operators to easily reconfigure their networks without modifying their RPKI objects. Our network measurements, however, suggest that the maxLength attribute strikes the wrong balance between security and user convenience. We therefore believe that operators should avoid using maxLength. We give operational recommendations and develop software that allow operators to reap many of the benefits of maxLength without its security costs.",

keywords = "Bgp, Interdomain routing security, RPKI",

author = "Yossi Gilad and Omar Sagga and Sharon Goldberg",

note = "Publisher Copyright: {\textcopyright} 2017 ACM.; 13th International Conference on Emerging Networking EXperiments and Technologies, CoNEXT 2017 ; Conference date: 12-12-2017 Through 15-12-2017",

year = "2017",

month = nov,

day = "28",

doi = "10.1145/3143361.3143363",

language = "אנגלית",

series = "CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies",

publisher = "Association for Computing Machinery, Inc",

pages = "101--107",

booktitle = "CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies",

}

Gilad, Y, Sagga, O & Goldberg, S 2017, MaxLength considered harmful to the RPKI. in CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies. CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies, Association for Computing Machinery, Inc, pp. 101-107, 13th International Conference on Emerging Networking EXperiments and Technologies, CoNEXT 2017, Incheon, Korea, Republic of, 12/12/17. https://doi.org/10.1145/3143361.3143363

MaxLength considered harmful to the RPKI. / Gilad, Yossi; Sagga, Omar; Goldberg, Sharon.
CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies. Association for Computing Machinery, Inc, 2017. p. 101-107 (CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - MaxLength considered harmful to the RPKI

AU - Gilad, Yossi

AU - Sagga, Omar

AU - Goldberg, Sharon

PY - 2017/11/28

Y1 - 2017/11/28

N2 - User convenience and strong security are often at odds, and most security applications need to find some sort of balance between these two (often opposing) goals. The Resource Public Key Infrastructure (RPKI), a security infrastructure built on top of interdomain routing, is not immune to this issue. The RPKI uses the maxLength attribute to reduce the amount of information that must be explicitly recorded in its cryptographic objects. MaxLength also allows operators to easily reconfigure their networks without modifying their RPKI objects. Our network measurements, however, suggest that the maxLength attribute strikes the wrong balance between security and user convenience. We therefore believe that operators should avoid using maxLength. We give operational recommendations and develop software that allow operators to reap many of the benefits of maxLength without its security costs.

AB - User convenience and strong security are often at odds, and most security applications need to find some sort of balance between these two (often opposing) goals. The Resource Public Key Infrastructure (RPKI), a security infrastructure built on top of interdomain routing, is not immune to this issue. The RPKI uses the maxLength attribute to reduce the amount of information that must be explicitly recorded in its cryptographic objects. MaxLength also allows operators to easily reconfigure their networks without modifying their RPKI objects. Our network measurements, however, suggest that the maxLength attribute strikes the wrong balance between security and user convenience. We therefore believe that operators should avoid using maxLength. We give operational recommendations and develop software that allow operators to reap many of the benefits of maxLength without its security costs.

KW - Bgp

KW - Interdomain routing security

KW - RPKI

UR - http://www.scopus.com/inward/record.url?scp=85040256418&partnerID=8YFLogxK

U2 - 10.1145/3143361.3143363

DO - 10.1145/3143361.3143363

M3 - ???researchoutput.researchoutputtypes.contributiontobookanthology.conference???

AN - SCOPUS:85040256418

T3 - CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies

SP - 101

EP - 107

BT - CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies

PB - Association for Computing Machinery, Inc

T2 - 13th International Conference on Emerging Networking EXperiments and Technologies, CoNEXT 2017

Y2 - 12 December 2017 through 15 December 2017

ER -

Gilad Y, Sagga O, Goldberg S. MaxLength considered harmful to the RPKI. In CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies. Association for Computing Machinery, Inc. 2017. p. 101-107. (CoNEXT 2017 - Proceedings of the 2017 13th International Conference on emerging Networking EXperiments and Technologies). doi: 10.1145/3143361.3143363

MaxLength considered harmful to the RPKI

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Other files and links

Fingerprint

Cite this