Re: Seeking Feedback on Mitigation of New BGP-driven Attack

2019-05-10 Thread Job Snijders
Dear Jared, This was a very interesting read. Thank you for sharing it with us. The paper contained new information for me, if I hope I summarize it correctly: by combining AS_PATH poisoning and botnets, the botnet’s firing power can be more precisely aimed at a specific target. Can you clarify w

Call for Participation -- ICANN DNSSEC Workshop at ICANN65, Marrakech, Morocco.

2019-05-10 Thread Jacques Latour
Call for Participation -- ICANN DNSSEC Workshop at ICANN65, Marrakech, Morocco. The DNSSEC Deployment Initiative and the Internet Society Deploy360 Programme, in cooperation with the ICANN Security and Stability Advisory Committee (SSAC), are planning a DNSSEC Workshop during the ICANN65 meeting

Weekly Routing Table Report

2019-05-10 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-st...@li

Re: NTP for ASBRs?

2019-05-10 Thread Christopher Morrow
On Thu, May 9, 2019 at 4:42 PM Mike Hammett wrote: > > Many systems have less than ideal separation of collection, storage, viewing, > export, etc. timezones. I prefer to view in local time. I may wish to export > in another. Storage in UTC to facilitate all of this makes sense. Normalizing > i

Seeking Feedback on Mitigation of New BGP-driven Attack

2019-05-10 Thread Jared Smith
Hello, Our research lab at the University of Tennessee (volsec.org) has recently completed a study on channeling link-flooding attack (transit link DDoS) flows via BGP poisoning: the Maestro attack. We are seeking feedback on mitigation (see below). A brief summary from the abstract: "Executed