Re: community real-time BGP hijack notification service

From: Randy Bush (no email)
Date: Sat Sep 13 2008 - 03:21:02 EDT

  • Next message: Nathan Ward: "Re: community real-time BGP hijack notification service"

    i am occasionally asked if there have been real bgp attacks (not slips).
    the answer is, of course yes, but there are none which can be publicly
    described. when bucks and embarrassment are involved, security through
    obscurity seems to rule.

    but tony and alex did us an enormous favor by publicly conducting such
    an attack, see http://www.merit.edu/mail.archives/nanog/msg10357.html

    so, what i want to know is which, if any of the tools being discussed on
    this thread *actually* did or could detect and/or mitigate the tony/alex
    defcon attack.

    i appreciate the dozens of tools that detect and mitigate finger or
    brain fumbles. but those are not where the black hats are gonna go to
    make the big bucks.

    randy


  • Next message: Nathan Ward: "Re: community real-time BGP hijack notification service"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD