Removing Barriers to RPKI Adoption

Описание: Abstract

Resource Public Key Infrastructure (RPKI) has emerged as a standard for enhancing the security of Internet routing. Currently, more than 50% BGP prefixes are covered by RPKI Route Origin Authorizations (ROAs), enabling networks to validate the origin of prefix advertisements in BGP. Despite this progress, ROA adoption remains non-uniform, with key stakeholders encountering significant barriers in the adoption process. In this paper, we combine a product adoption framework with data-driven analysis of global RPKI adoption to identify persistent disparities and pinpoint the stages of the adoption process that hinder broader growth. Our study reveals that, although RPKI awareness has grown, the complexity of planning and deploying ROAs remains a significant challenge. Since no unified workflow and documentation exist for ROA planning, many organizations are left without clear operational guidance. To address this challenge, we propose a systematic framework for ROA planning and introduce ru-RPKI-ready, a platform designed to provide data and insights to facilitate ROA planning. Using ru-RPKI-ready, we characterize the routed address space not covered by RPKI ROAs. We find that 47% IPv4 and 71% IPv6 prefixes not in RPKI could be covered with minimal technical effort. Our analysis also reveals that if as few as ten organizations were to take the necessary actions, the global ROA coverage could increase by 7% for IPv4 and 19% for IPv6.

Cecilia Testart:
Cecilia Testart is an assistant professor at the Georgia Institute of Technology (Georgia Tech), with a joint appointment between the School of Cybersecurity and Privacy and the School of Computer Science. Her research focuses on how internet protocols work and evolve, and how the outcome aligns with societal expectations such as security and privacy. Her work lies at the intersection of Internet measurements, security and policy, using data-driven approaches and considering technical and policy challenges to improve Internet security and reliability. Dr. Testart received her PhD in Computer Science from MIT in 2021. She also holds a S.M. in Technology and Policy and a S.M. in Computer Science from MIT, B.S in Engineering from Ecole Centrale Paris (France) and B.S in Industrial Engineering from Universidad de Chile (Chile).

https://nanog.org/events/nanog-96/con...