February 3, 2020

130 words 1 min read

Using ARIN WHOIS data in BGP prefix filters

Using ARIN WHOIS data in BGP prefix filters

I'd like to share a brief update on some routing security activities that ARIN, NTT, YYCIX, NLNOG, and the arouteserver project have been collaborating on. We work …
Talk Title Using ARIN WHOIS data in BGP prefix filters
Speakers Job Snijders, NTT Communications
Conference NANOG72
Conf Tag
Location Atlanta, GA
Date Feb 19 2018 - Feb 21 2018
URL Talk Page
Slides Talk Slides
Video Talk Video

I’d like to share a brief update on some routing security activities that ARIN, NTT, YYCIX, NLNOG, and the arouteserver project have been collaborating on. We worked to produce a new, automatable, source for authoritative routing data: ARIN WHOIS. There is a lot of valuable routing information in the ARIN WHOIS registry. I’ll cover how the data is used and suggest future improvements.

arin routing security bgp ntt
comments powered by Disqus
Kernel advantages for Istio realized with Cilium

Kernel advantages for Istio realized with Cilium

December 29, 2019

BPF technology is bringing Linux kernel capabilities up to speed with modern workload requirements. Cilium helps make BPF consumable for microservices architectures and enables Istio with the most powerful security solution by way of the kernel. Cynthia Thomas and Romain Lenglet explain why you should use Cilium to enforce API-aware policy while coordinating with Istio.
Implementing Least Privilege Security and Networking with BPF on Kubernetes

Implementing Least Privilege Security and Networking with BPF on Kubernetes

December 24, 2019

BPF is becoming the fastest growing technology in the Linux kernel and is revolutionizing networking, security, and tracing. At the same time, the rise of Kubernetes is creating demand for routing, lo …
Istio - The Packet's-Eye View

Istio - The Packet's-Eye View

December 18, 2019

The Istio project reached 1.0 this summer, and is mature enough to have LTS releases. It's getting a lot of attention, but in a lot of ways it's still a mystery. You've probably read about it, you mig …
DNS Survival Guide

DNS Survival Guide

February 3, 2020

A contemporary network service heavily depends on domain name system operating normally. Yet, often issues and caveats of typical DNS setup are being overlooked. D …
How CLEVER is your neural network? Robustness evaluation against adversarial examples

How CLEVER is your neural network? Robustness evaluation against adversarial examples

February 3, 2020

Neural networks are particularly vulnerable to adversarial inputs. Carefully designed perturbations can lead a well-trained model to misbehave, raising new concerns about safety-critical and security-critical applications. Pin-Yu Chen offers an overview of CLEVER, a comprehensive robustness measure that can be used to assess the robustness of any neural network classifiers.
KRACK Simplified

KRACK Simplified

February 3, 2020

WiFi devices have been using a security protocol called WPA2 without any known issues for over a decade. But in October 2017, two security researchers from Univers …