Attack and defence: BGP hijacking and RPKI

لم يُترجم بعد؛ يُعرض باللغة الإنجليزية

BGP believes what networks announce. Watch a network called H claim half of someone else's address block, 203.0.113.0/25, and pull traffic towards itself, because routers always use the most specific route. Then see the defence: the real owner signs a Route Origin Authorization in the RPKI, your ISP checks it, and Route Origin Validation marks the hijack Invalid and drops it.