Threat Model for BGP Path Security

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 20
Abstract: This document describes a threat model for the context in which External Border Gateway Protocol (EBGP) path security mechanisms will be developed. The threat model includes an analysis of the Resource Public Key Infrastructure (RPKI) and focuses on the ability of an Autonomous System (AS) to verify the authenticity of the AS path info received in a BGP update. We use the term "PATHSEC" to refer to any BGP path security technology that makes use of the RPKI. PATHSEC will secure BGP, consistent with the inter-AS security focus of the RPKI. The document characterizes classes of potential adversaries that are considered to be threats and examines classes of attacks that might be launched against PATHSEC. It does not revisit attacks against unprotected BGP, as that topic has already been addressed in the BGP-4 standard. It concludes with a brief discussion of residual vulnerabilities.
Publication Date: 2014-02-01
Status Note: Informational
DOI: 10.17487/RFC7132
Link: https://doi.org/10.17487/RFC7132
Author(s): Stephen Kent
Andrew Chi
Keyword(s): BGPsec, RPKI, SIDR

Latest version of IETF RFC 7132

Document Versions — IETF RFC 7132

▶ IETF RFC 7132 (2014-02-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Bibliographic Reference(s)

Kelly, W., "We Have Met The Enemy and He Is Us: Pogo Earth Day Poster", April 1970. EXTERNAL
"Secure Inter-Domain Routing: Charter for Working Group", September 2013, < http://tools.ietf.org/wg/sidr/ charters?item=charter-sidr-2013-09-20.txt >. EXTERNAL
Samuel, A., "Hacktivism and the Future of Political Participation", Ph.D. dissertation, Harvard University, September 2004, < http://www.alexandrasamuel.com/ dissertation/pdfs/Samuel-Hacktivism-entire.pdf >. EXTERNAL
Kent, S., Lynn, C., and K. Seo, "Design and Analysis of the Secure Border Gateway Protocol (S-BGP)", IEEE DISCEX Conference, June 2000. EXTERNAL
IETF RFC 3779 [Active*]
IETF RFC 4271 [Active*]
IETF RFC 4272 [Active*]
IETF RFC 4301 [Active, Amended*]
IETF RFC 5925 [Active*]
IETF RFC 6480 [Active*]
IETF RFC 6481 [Active*]
IETF RFC 6482 [Superseded*]
IETF RFC 6486 [Superseded*]
IETF RFC 6487 [Active*]
IETF RFC 6488 [Active*]
IETF RFC 6493 [Active*]
IETF RFC 6810 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7132.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7132, Threat Model for BGP Path Security. Available at https://doi.org/10.17487/RFC7132

Snippet:

IETF RFC 7132, Threat Model for BGP Path Security. Available at https://doi.org/10.17487/RFC7132

HTML (ISO 690 compliant)

Preview:

IETF RFC 7132, Threat Model for BGP Path Security. Available at https://doi.org/10.17487/RFC7132

Snippet:

<span class="citation"><cite>IETF RFC 7132</cite>, Threat Model for BGP Path Security. Available at <a href="https://doi.org/10.17487/RFC7132" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7132</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7132, Threat Model for BGP Path Security
doi: 10.17487/RFC7132
url: https://doi.org/10.17487/RFC7132

Snippet:

<li>
<cite id="bib-rfc7132">IETF RFC 7132</cite>, Threat Model for BGP Path Security
<span class="doi">10.17487/RFC7132</span>
</li>

Referenced By

IETF RFC 7353 [Active*]
IETF RFC 7454 [Active*]
IETF RFC 8205 [Active*]
IETF RFC 8555 [Active*]