Strengthening APNIC’s security foundations
APNIC is strengthening the security of its core systems through infrastructure modernization, enhanced application testing, and improved data practices.
Tag: security
Notes from NANOG 97
AI eats the world, geolocation, measuring IPv6, and the cost of SSH from NANOG 97.
Your elected leaders: Terry Sweetser, Routing Security SIG Chair
The Internet is built by communities, not just networks. As Routing Security SIG Chair, Terry is focused on strengthening that effort — from advancing RPKI adoption to supporting the next generation of operators.
Rethinking vulnerability management in the age of AI and CI/CD
Guest Post: AI-driven development is accelerating how software changes and how vulnerabilities are fixed. Traditional models like CVE and CVSS are struggling to keep pace.
Don’t throw the (cryptographic) baby out with the bathwater
Even if Shor’s Algorithm is now implementable inside ten years, symmetric keying should still be trustworthy if we fix RSA with PQC methods. Don’t throw the baby out with the bathwater!
From workshop to deployment: How Bangladesh ccTLD implemented DNSSEC
Guest Post: How Bangladesh’s .BD ccTLD moved from no DNSSEC coverage to a fully validated chain of trust across its most critical SLDs, overcoming tooling gaps, operational failures, and infrastructure challenges along the way.
Non-Human Identity for workloads: Securing the next phase of automation
Guest Post: Non-Human Identity is evolving as automation and AI increase machine-to-machine connections. Short-lived, key-based credentials address long-standing risks, but industry now needs clear assurance levels for workload identities. Collaboration will shape the next phase of NHI standards.
RADIUS isn’t going away, so let’s fix it properly
Guest Post: “RADIUS is the protocol that will never die”. So given that RADIUS is staying, what do we need to do to make it secure for the next 30 years?
Ephemeral leaks and automated BGP route leak detection
Guest Post: Many BGP route leaks flagged by automated systems are short-lived artifacts of normal convergence. Doug Madory draws on Cloudflare Radar, RouteViews, and Jared Mauch’s leak detector to show how these ‘ephemeral leaks’ occur, why they rarely disrupt traffic, and why they still matter for routing security.
DDoS in Indonesia: What has changed?
Examining recent trends in DDoS activity across the Asia Pacific region and practical ways to reduce both exposure and impact.