Extreme Exploits: Advanced Defenses Against Hardcore Hacks (Hacking Exposed)

Components of ISP Security

The primary business of an ISP is to deliver packets reliably across and throughout its network. Sure, they have a bunch of great products and services such as "Secure IP VPN" and "Real-time Streaming" and all sorts of other jazzy marketing names . However, the fundamental technology under all of the hype is IP routing.

ISPs typically offer supplementary services such as backup MX hosting, recursive or authoritative DNS, and managed services such as dedicated access, VPNs, and firewalls. Many of these services consist of equipment provided and managed completely by the ISP and this puts your security in the hands of the ISP. The following list summarizes components that impact the security of the routing infrastructure, the services carried on that infrastructure, and your security.

• Routing infrastructure

  • Filtering of route advertisements from peers and customers

  • Use of a routing registry

• Network monitoring, security, and service-level agreements

  • ISP monitoring of

    • Attacks on backbone

    • Attacks on customers

  • Attack mitigation

    • Customer-triggered black hole routing

    • Interprovider communication