[AusNOG] FYI : Attackers are accessing routers running on the border gateway protocol (BGP) and injecting additional hops

[Dobbins, Roland]

On Nov 24, 2013, at 4:10 PM, Joshua D'Alton <joshua at railgun.com.au> wrote:

> I'd be interested if you knew how Level3 particularly protect their netblocks, especially the precious 4/8, I've heard its the veritable fort knox of netblocks, but…

I can’t really get into whatever knowledge I may have about how specific operators protect their networks, but here’s a presentation on hardening network infrastructure against attack:

<https://app.box.com/s/osk4po8ietn1zrjjmn8b>

You should always register your netblocks with the IRR, and it’s a good idea to subscribe to a monitoring service like Renesys which can notify you if they detect your netblocks being hijacked (along with your policies).


-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

		The basis of optimism is sheer terror.

			  -- Oscar Wilde