APAN48

This session will be held from 9:00 am to 5:00 pm under the following Agenda.

Objectives :
This hands-on technical tutorial examines why securing the internet routing system is difficult, and the global impact when things go wrong. The tutorial also looks at the various existing tools and industry initiatives to reduce the chances of someone injecting false information into the routing system.
Through a mix of lectures and hands-on labs, this tutorial will look at understanding and deploying the various BGP operations and security best practices:
1. Recent routing incidents
2. Why and how these incidents happen
3. BGP filtering techniques
4. Fundamentals of Resource PKI
5. How to create ROAs
6. Deploying RPKI Validators
6. BGP filtering with ROAs (also called route origin validation)

Session Chairs :  
Che-Hoo Cheng , APNIC
Tashi Phuntsho , APNIC. Australia

Agenda :

This hands on technical tutorial examines why securing the internet routing system is difficult and the global impact when things go wrong.
The tutorial also looks at the various existing tools and industry initiatives to reduce the chances of someone injecting false information into the routing system .

Hands-On Tutorial on ROA/ROV for Secure Routing   - Tashi Phuntsho , APNIC. Australia

Through a mix of lectures and hands-on labs, this tutorial will look at understanding and deploying the various BGP operations and security best practices:
1. Recent routing incidents
2. Why and how these incidents happen
3. BGP filtering techniques
4. Fundamentals of Resource PKI
5. How to create ROAs
6. Deploying RPKI Validators
6. BGP filtering with ROAs (also called route origin validation)

Workshop Pre-requisites:
1. It is assumed that the workshop participants have a working knowledge of an OSPF/IS-IS and BGP fundamentals, along with know how to use a router command line interface.
2. This workshop is not an introduction. The lab exercises use Cisco IOS configuration syntax

Other requirements:
Hardware: It is highly recommended that participants bring their own computers with Wi-Fi (a/b/g/n)
Software: SSH client, Telnet client (PuTTy)

Related Sessions :