Movatterモバイル変換

MemberPortal

JoinDetails about FIRST membership and joining as a full member or liaison.LearnTraining and workshop opportunities, and details about the FIRST learning platform.ParticipateRead about upcoming events, SIGs, and know what is going on.CommunityCommunity and Capacity Building.

NETSEC SIG

Request to Join

Mission

To foster the deployment of inter-AS network security BCPs, coordinated mitigation, and information sharing.

Objectives:

To encourage the adaption of inter-AS security Best Current Practices (BCPs)
To facilitate response coordination of inter-AS BGP routing issues and abuse
To promote inter-AS DDoS traceback and mitigation
To encourage inter-AS security incident event sharing

SIG topics and areas of interest:

Route hijacks and leaks
DDoS
Traceback and attack source attribution
DNS and DNSSEC operational issues
RPKI, ROV, and other burgeoning routing security technologies
BCPs, tools, and resources such as those from MANRS.org and PeeringDb.com
Network operator and researcher collaboration

Goals & Deliverables

Compile a set of inter-AS security BCPs and resources for CSIRTS and network security teams
Deliver regular inter-AS security workshops or tutorials at FIRST events
Provide a Slack channel and mailing list to faciltate inter-AS security discussions
Disseminate technical briefs on inter-AS security involving the shared fate of subsystems such as DNS, Routing, Email and others through regular SIG meetings and FIRST blog posts
Explore extending the FIRST teams directory to publish ASN, MANRS status, and PeeringDB link as applicable
Promote the SIG to qualified external parties and individuals already members of FIRST

Chairs

John Kristoff
Hendrik Adrian
Carlos Friacas
Aaron Kaplan
Merike Kaeo

Meetings

Annual meetings to coincide with the FIRST conference
Bi-weekly Zoom meetings

Glossary

AS - Autonomous System
BCP - Best Common Practice
BGP - Border Gateway Protocol
DDoS - Distributed Denial of Service
MANRS - Mutually Agreed Norms for Routing Security

Additional considerations

Intended audience

inter-AS router and network operators
inter-AS DNS service providers
inter-AS security researchers
CSIRT inter-AS security members

Participation Requirements

This is an individual-only approved SIG, no teams nor aliases
Inter-AS security responsibility or influence
Individual email addresses must remain active and be periodically tested

Roadmap

Phase 1 - DONE:~~Group formation~~
Phase 2 - DONE:~~inter-AS security documentation and resource compilation~~
Phase 3 - Expand operational capacity and services

References

Resource Public Key Infrastructure (RPKI)

https://rpki.readthedocs.io/

RPKI Online Tools

RIR Pages about RPKI

Mutually Agreed Norms for Routing Security (MANRS)

Best Current Practice Documents

Validation Software

Routinator:https://github.com/NLnetLabs/routinator
FORT-validator:https://github.com/NICMx/FORT-validator
rpki-client:https://github.com/rpki-client/rpki-client-portable

BGP Route Hijacking

DNS

SSAC Report on an Interoperable Approach to Addressing Abuse Handling in the DNS:https://www.icann.org/en/system/files/files/sac-115-en.pdf
DNS Abuse Techniques Matrix:https://www.first.org/global/sigs/dns/DNS-Abuse-Techniques-Matrix_v1.1.pdf

Other

The Interconnection Database:https://www.peeringdb.com
BGPAlerter:https://github.com/nttgin/BGPalerter
ARTEMIS:https://github.com/FORTH-ICS-INSPIRE/artemis
The Spamhaus Don't Route Or Peer Lists:https://www.spamhaus.org/drop/
Is BGP Safe Yet?:https://isbgpsafeyet.com/

Initiatives

[8]ページ先頭

©2009-2026 Movatter.jp