4 papers
The Fault in Our Drafts: Vulnerabilities in RPKI Specification and Software
Oliver Jacobsen, Tobias Kirsch, Haya Schulmann +2
The Resource Public Key Infrastructure (RPKI) secures the Internet's routing system by defining a complex trust and validation framework for certificates, Route Origin Authorizatio…
Batch Me If You Can: Coverage-guided RPKI Fuzzing at Scale
Haya Schulmann, Niklas Vogel
The Resource Public Key Infrastructure (RPKI) has become essential to secure inter-domain routing. Despite its critical role, RPKI software remains largely untested beyond shallow…
Pruning the Tree: Rethinking RPKI Architecture From The Ground Up
Haya Schulmann, Niklas Vogel
Resource Public Key Infrastructure (RPKI) is a critical security mechanism for BGP, but the complexity of its architecture is a growing concern as its adoption scales. Current RPKI…
Poster: From Fort to Foe: The Threat of RCE in RPKI
Oliver Jacobsen, Haya Schulmann, Niklas Vogel +1
In this work, we present a novel severe buffer-overflow vulnerability in the RPKI validator Fort, that allows an attacker to achieve Remote Code Execution (RCE) on the machine runn…