Advanced Routing Security

	VN timezone
Opening	08:15 - 08:30
Internet Routing Security overview and issues in the world and in Viet Nam	08:30 - 09:45
Hands-on lab	10:00 - 12:00
Securing Internet Routing with RPKI	13:30 - 16:00
Discussion	16:15 - 16:45
Closing	16:45 - 17:00

* The above schedule is in Vietnam (GMT+7)

https://www.timeanddate.com/worldclock/personal.html?cities=47,95

FL	Name	Email	Organisation	Country
WF	Warren Finch	warren(at)apnic(dot)net	APNIC	Australia
PD	Phan Xuan Dung		VNIX	Vietnam
NN	Nguyen Van Nhan		VNIX	Vietnam

Complete the Survey

Session	Topic	Trainer	Presentations	Exercises	Other Resources
Session 1	Internet Routing Security overview and issues in the world and in Viet Nam + Route Leaks/ Route Hijack in real time + Route Leaks/ Route Hijack case study + Detection Tools and Solutions	All	Agenda Securing Internet Routing (with RPKI)	https://bgpstream.crosswork.cisco.com	RFC 7908 https://hicube.caida.org/login https://www.caida.org/catalog/media/2019_hicube_dhsst/hicube_dhsst.pdf A Survey among Network Operators on BGP Prefix Hijacking iSPY: Detecting IP Prefix Hijacking Demystifying AS0
Session 2	BGP Route Hijack & Leak Detection & Prevention	All		BGPalerter Lab https://demo.bgpartemis.org/login	https://github.com/nttgin/BGPalerter BGPalerter 1 minute tutorial Easy BGP Monitoring with BGPalerter https://bgpartemis.org Ripe blog about artemis https://github.com/ANSSI-FR/tabi http://caia.swin.edu.au/tools/bgp/brt/downloads.html
Session 3	Securing Internet Routing How to create ROAs (demo)	WF	Securing Internet Routing (with RPKI)		APNIC54 - Identify Routing Security Flaws and How to fix it APNIC Route Management https://rpki-validator.ripe.net/roas https://rpki.cloudflare.com/ https://bgp.he.net/
Session 4	Installing RPKI Validators	All		Routinator Fort RPKI-Client RPKI Prover	Install NLnet Labs Routinator Install Octo rpki Install FORT rpki APNIC Blog
	Filtering with ROAs (Route Origin Validation) Lab	All		PDF	RPKI Virtual Lab with Routinator RPKI Virtual Lab with FORT VNNIC Internet Academy RPKI course Hướng dẫn sử dụng RPKI thực hiện xác thực thông tin trong hoạt động định tuyến
	Q&A and Closing	All

	Topic	Resources
Other resources	Request For Comments (RFC)	Which RPKI RFC to read RFC 8212 BGP Policies
	List of validators	NLNetLabs Routinator - https://github.com/NLnetLabs/routinator/ FORT Validator - https://github.com/NICMx/FORT-validator/ Cloudflare OctoRPKI - https://github.com/cloudflare/cfrpki RPKI-client - https://rpki-client.org/ Prover - https://github.com/lolepezy/rpki-prover Rpstir2 - https://github.com/bgpsecurity/rpstir2
	MANRS resources	https://www.manrs.org/resources/how-to-videos/
	RPKI resources	https://bgpstream.com https://rp-study.rpki.net https://jdr.nlnetlabs.nl http://nong.rand.apnic.net:8080/roas https://rpki-monitor.antd.nist.gov http://rpki-browser2.realmv6.org https://routinator.nlnetlabs.nl bgpq3 https://routinator.docs.nlnetlabs.nl/en/stable/installation.html https://afrinic.academy/courses/secure-internet-routing
	Research papers	BGP hijacking classification BGPStream: A Software Framework for Live and Historical BGP Data Analysis iSPY: Detecting IP Prefix Hijacking on My Own RPKI relying party synchronization behaviour
	Misc. resources	https://www.bgp4.as/tools https://blog.apnic.net/?s=hijack A survey on securing inter-domain routing BGP Route leaks vs BGP Hijacks New tools help detect and analyse BGP hijacks Tools for BGP Peering, Analysis, Troubleshooting & Monitoring Juniper - Deploying BGP routing security

Advanced Routing Security

Time Schedule

Trainers

Workshop Sessions

APNIC TRAINING WIKI