Goals of these Countermeasures
A scalable, deployable system that ensures
- integrity, authenticity, and partial sequence integrity for each BGP routing UPDATE
- valid AS_PATH in an UPDATE
- authorization of the initial speaker to advertise the address space embodied in the UPDATE
Minimize the adverse effects of compromise of any BGP speaker, BGP management system, or portion of the proposed security infrastructure