{"id":5135,"date":"2015-01-21T07:00:54","date_gmt":"2015-01-21T15:00:54","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=5135"},"modified":"2014-12-18T21:51:18","modified_gmt":"2014-12-19T05:51:18","slug":"security-dns-and-bgp-provide-shaky-foundation-for-todays-internet","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-dns-and-bgp-provide-shaky-foundation-for-todays-internet\/","title":{"rendered":"Security: DNS and BGP Provide Shaky Foundation for Today’s Internet"},"content":{"rendered":"

Two foundations of the Internet are DNS and BGP. \u00a0The Domain Name System (DNS) <\/a>determines where information will flow. \u00a0The Border Gateway Protocol (BGP)<\/a> determines the route taken to deliver the information. \u00a0The problem is that these systems were designed \u00a0at a time where there wasn’t much thought to security. \u00a0As trust-based systems they have become targets for exploitation by hackers who have been able to capture, alter and redirect the flow of information.<\/p>\n

Attacks against Border Gateway Protocol (BGP) and the Domain Name System (DNS) have become prevalent. \u00a0It’s been called BGP poisoning<\/a>, and it has been known about for many years. \u00a0For example, in 2008 Pakistan tried blocking access <\/a>to YouTube within their country but unintentionally took YouTube offline globally. \u00a0\u00a0Researchers suggest<\/a> that it may even be possible for a relatively simple botnet cyberweapon to target BGP vulnerabilities and take the entire internet down.<\/p>\n

Geoff Huston<\/a>, chief scientist at the Asia-Pacific Network Information Centre (APNIC), told\u00a0Juha Saarinen<\/a>\u00a0of\u00a0itNews\u00a0<\/a>that “is it serious? Of course. Do folks take it seriously? Of course not. \u00a0It would be good to say that the ISP industry is acutely aware of the issues here and is enthusiastically supporting initiatives to build up the level of security in the routing system and to prevent the ease with which these attacks can be undertaken.\u00a0But it would be a lie in every respect.”<\/p>\n

And BGP’s problems aren’t just limited to hacking. \u00a0Problems started cropping up last August<\/a> with BGP and older router hardware. \u00a0Routers started to reach an overflow capacity for the number of route entries of the BGP table that they were able store. \u00a0Many older routers had a maximum capacity of 512K entries. \u00a0The overflow resulted in a number of connection problems.<\/p>\n

Some proposals, like BGPsec<\/a>, are designed to be much more secure. \u00a0But it may be some time before newer proposals are approved and implemented.<\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Two foundations of the Internet are DNS and BGP. \u00a0The Domain Name System (DNS) determines where information will flow. \u00a0The Border Gateway Protocol (BGP) determines the route taken to deliver the information. \u00a0The problem is that these systems were designed…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31,36],"tags":[],"class_list":["post-5135","post","type-post","status-publish","format-standard","hentry","category-security","category-technology"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=5135"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5135\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=5135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=5135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=5135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}