Posts Tagged ‘RIPE68’

Video: BGP Blackholing Project (RIPE 68)

How can network operators cooperate to prevent abuse? How do we educate network operators to ensure they’re connecting their network in a secure way to the Internet? In this lightning talk from Lukasz Bromirski from Cisco, learn how operators in Poland are cooperating to prevent network abuse. Lukasz’s talk, entitled “BGP Blackholing Project” is now Read more…


July 11th, 2014 by | Posted in Securing BGP | Tags: , , | No Comments

Video: RPKI For Provider Independant Resources (RIPE 68)

How can provider independent(PI) address space be validated with the Resource Public Key Infrastructure (RPKI)? How can we get smaller organizations to deploy BGP RPKI? In this lightning talk from Alex Band of RIPE-NCC, learn how an organization with PI address space registered with RIPE-NCC can easily create and access RPKI resources. Previously this was Read more…


June 20th, 2014 by | Posted in Securing BGP | Tags: , , , , | No Comments

Video: DANEs Don’t Lie – DANE/SMTP (RIPE 68)

How can we secure communications between SMTP mail servers? Simply using TLS between servers will not prevent Man In The Middle(MITM) attacks. DNSSEC and DANE to the rescue! Using DANE, SMTP servers can validate X.509 certificates tied to TLS using DNSSEC lookups. In this lightning talk from Carsten Strotmann, learn how this all works and Read more…


June 19th, 2014 by | Posted in DANE, DNSSEC, Videos | Tags: , , , | 3 Comments

Video: Google DNS Hijacking in Turkey (RIPE 68)

Between March 29 and April 7 of 2014, the Turkish government announced a /32 BGP route for Google’s public DNS. This route redirected users to a DNS server which resolved popular addresses such as twitter.com and youtube.com to Turkish government websites. We previously wrote about this while it was happening. Now Stéphane Bortzmeyer’s talk, entitled Read more…


June 19th, 2014 by | Posted in Securing BGP | Tags: , , , , | No Comments

Video: CrypTech and RPKI (Randy Bush at RIPE 68)

How do we build an open hardware security module that’s verifiably secure? Can we use Openflow and BGP RPKI to enforce route validation in the data plane? In this two part lightning talk Randy Bush introduces two projects he and others have started. The first project is cryptech.is, an open reference design for hardware security Read more…


June 9th, 2014 by | Posted in Securing BGP | Tags: , , , , | No Comments

Video: Balancing End-user IPv6 Security and End-to-end Connectivity (RIPE 68)

How do we balance security and functionality for end-users? Should IPv6 customer premise equipment(CPE) have a firewall enabled by default? In this lightning talk from Ragnar Anfinsen, learn about efforts within the Internet Engineering Task Force (IETF) to create a Best Current Practice document addressing this problem. Ragnar gives an update on where the IETF Read more…


June 5th, 2014 by | Posted in BCOP, IPv6, Security, Videos | Tags: , , , | No Comments

Video: The IPv6 Analyser (RIPE 68)

How can operators manage their IPv6 allocations from RIPE-NCC? In this lightning talk from Alex Band of RIPE-NCC, learn how Local Internet Registries(LIRs) can take advantage of a new visualization tool from RIPE-NCC to view and manage their IPv6 address allocations. This new tool helps LIRs develop an addressing plan and visually conceive of both Read more…


June 4th, 2014 by | Posted in IPv6, Tools | Tags: , , , | No Comments

Video: IPv6 Troubleshooting for Helpdesks by Jan Zorz (RIPE 68)

What can we do to help operators prepare their helpdesk staff to troubleshoot IPv6? In this lightning talk from Jan Zorz, learn about recent efforts in the RIPE-NCC Best Current Operational Practices (BCOP) working group to provide actionable troubleshooting information for helpdesk workers. Using http://isp.testipv6.com in combination with an error decoder, helpdesk staff can more Read more…


June 2nd, 2014 by | Posted in BCOP, IPv6, IPv6 testing, Videos | Tags: , | 1 Comment

Video: DNSSEC Measurement Using Atlas Probes (RIPE 68)

DNSSEC measurement session at RIPE 68

What percentage of DNS resolvers are capable of DNSSEC?  Using RIPE’s Atlas network can we determine the status of the global DNSSEC deployment?  At the recent RIPE 68 conference in Warsaw, Poland, Nicolas Canceill from the University of Amsterdam spoke about recent research he conducted on measuring the DNSSEC deployment.  His talk, “Measuring the Deployment Read more…


May 23rd, 2014 by | Posted in DNSSEC, Statistics, Videos | Tags: , , , | No Comments

Video: IPv6 Security Myths and Reality by Chris Grundemann (RIPE 68)

Chris Grundemann at RIPE68

What is the reality behind IPv6 security?  What is different (or not) about IPv6 vs IPv4 in terms of security?  What are some of the common myths about IPv6 security?  At the recent RIPE 68 conference in Warsaw, Poland, our Chris Grundemann spoke about common beliefs about IPv6 security and what people should really be Read more…


May 21st, 2014 by | Posted in IPv6, Security, Videos | Tags: , , , | No Comments