The Border Gateway Protocol (BGP) plays a crucial role in the fabric of the Internet, guiding data through a complex maze of paths to reach its destination. Despite its foundational importance, BGP's initial design did not account for stringent security measures, notably lacking mechanisms to authenticate and authorize IP prefix announcements. In response to these vulnerabilities, the Internet Engineering Task Force (IETF) initiated the development of the Resource Public Key Infrastructure (RPKI) in April 2008. RPKI is a security framework designed to secure the Internet's routing infrastructure by providing a way to validate the legitimacy of BGP route announcements. Recently, the Federal Communications Commission (FCC) has proposed a rule that would require broadband providers to develop BGP Routing Security Risk Management Plans, which outline their strategies and progress in implementing security measures utilizing RPKI. In this talk, I will discuss how RPKI works and how network operators have deployed RPKI to protect their resources. I will also cover how they validate BGP announcements using RPKI. Furthermore, I will explore diverse measurement techniques and discuss potential improvements to the RPKI framework.
Taejoong (Tijay) Chung is an Assistant Professor at the Computer Science department at Virginia Tech and Adjunct Professor at the Computer Science department at POSTECH. He received his Ph.D. in Computer Science and Engineering from Seoul National University in 2015. His work focuses on Internet security, privacy implications, and Internet measurement. He received the NSF CAREER Award and Outstanding New Assistant Professor at the College of Engineering, Virginia Tech in 2024. He was a Mentor at Mutually Agreed Norms for Routing Security (MANRS), Internet Society in 2023. He received the ACM CCS Best Paper Honorable Mention Award (2022), IRTF Applied Networking Research Prize (2019), ACM IMC Distinguished Paper Award (2019), NSF CRII Award (2019), and USENIX Security Distinguished Paper Award (2017).