Roadmap to Enhancing Internet Routing Security

This report aims to address a key security vulnerability associated with the Border Gateway Protocol (BGP)—the protocol that underpins the way information is routed across networks. While there is no single solution to address all internet routing vulnerabilities, the roadmap advocates for the adoption of Resource Public Key Infrastructure (RPKI) as a mature, ready-to-implement approach to mitigate BGP’s vulnerabilities. The Roadmap provides 18 key recommendations to network operators, service providers, and federal agencies. They include:

• Risk-Based Planning: Every network operator should develop, maintain, and periodically update a cybersecurity risk management plan.
• Federal Grant Guidance: Federal agencies providing grant funding to build critical infrastructure that includes internet-connected systems or technologies, especially broadband networks, should require that grant recipients incorporate routing security measures into their projects.
• International Engagement: The Department of State, in coordination with appropriate agencies, should highlight internet routing security efforts and best practices in engagements with international partners to increase awareness of the benefits of the adoption of internet routing security measures.