Scholarlink

This paper conducts a comprehensive empirical analysis of a key component of Resource Public Key Infrastructure (RPKI), the repository system, focusing on its reliance on critical Internet infrastructure: Domain Name System (DNS) and Web PKI system. Our study reveals the complex structure of the RPKI repository system, characterized by intricate interdependency and circular dependencies across regional Internet registries. We evaluate the centralization of RPKI’s reliance on DNS top-level domains and Web PKI root certificate authorities, identifying significant potential single points of failure that could compromise the RPKI’s integrity. This paper also analyzes typical attacks targeting DNS and Web PKI components, evaluates the risk of RPKI data loss, and measures the deployment of security solutions designed to mitigate these threats. Our findings emphasize the need to strengthen the security and reliability of the Internet infrastructure that supports RPKI. This research contributes valuable insights to the ongoing development and implementation of RPKI, bolstering global network security.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

The RPKI and its Hidden Guardians: An Empirical Analysis of their Relationship and Security Implications

  • 会议论文

  • 发表日期：

    2026年

查看全文
  • Hui Zou,
  • Yizhuo He,
  • Yuxiang Jin

摘要

This paper conducts a comprehensive empirical analysis of a key component of Resource Public Key Infrastructure (RPKI), the repository system, focusing on its reliance on critical Internet infrastructure: Domain Name System (DNS) and Web PKI system. Our study reveals the complex structure of the RPKI repository system, characterized by intricate interdependency and circular dependencies across regional Internet registries. We evaluate the centralization of RPKI’s reliance on DNS top-level domains and Web PKI root certificate authorities, identifying significant potential single points of failure that could compromise the RPKI’s integrity. This paper also analyzes typical attacks targeting DNS and Web PKI components, evaluates the risk of RPKI data loss, and measures the deployment of security solutions designed to mitigate these threats. Our findings emphasize the need to strengthen the security and reliability of the Internet infrastructure that supports RPKI. This research contributes valuable insights to the ongoing development and implementation of RPKI, bolstering global network security.