Inter-domain routing as a target

Inter-domain routing trusts announcements by default. A network states which prefixes it holds and which paths it has heard, and neighbours accept that mostly on habit and contract rather than proof. The defensive job splits the usual way: shrink the room an attacker needs before anything is announced, and read the public control plane closely enough to catch the announcement when it comes.

The attacker’s-side reconnaissance, target selection, relationship inference, coverage survey, baselining, is documented in the red notes on casing the clacks. A brief origin-validation control already lives in the network notes on reducing network attack surface; the pages here are the fuller, routing-specific treatment.

Hold the line