White House urges federal agencies to enhance internet routing security

Internet routing security: The White House has called on federal agencies to strengthen their internet routing security measures in response to concerns over China's potential to manipulate internet traffic. This directive comes amid reports suggesting that China has exploited vulnerabilities in internet routing protocols to divert US traffic.

In a recent report, the White House Office of the National Cyber Director highlighted the need to address security weaknesses associated with the Border Gateway Protocol (BGP), a fundamental system for routing global internet traffic. 

Routing security mandated

The report recommends that federal agencies adopt improved routing security technologies and mandates that US government contractors implement the latest commercially available internet routing security solutions.

The report stresses the risks of traffic being unintentionally or deliberately rerouted, which can lead to data breaches, theft, extortion, espionage, and disruptions to critical infrastructure and security-sensitive transactions.

BGP security lags behind

The BGP is integral to the internet's framework, linking over 70,000 networks worldwide. However, the report highlights that the protocol’s original design fails to meet the current security demands of the internet ecosystem.

In June, the Federal Communications Commission (FCC) moved forward with a proposal to enhance BGP security, following revelations that China Telecom had misdirected US internet traffic on several occasions. 

The Defense and Justice Departments have warned that such BGP vulnerabilities could allow China to disrupt, intercept, and manipulate US traffic.

FCC Chair Jessica Rosenworcel highlighted the dangers of BGP hijacking, which can compromise personal data and enable espionage and theft. 

Chinese firms banned

Earlier this year, the FCC ordered Chinese telecommunications firms, including China Telecom, China Unicom, China Mobile, and Pacific Networks, to cease their US broadband operations due to national security concerns.

Additionally, the FCC has previously prohibited the use of new telecommunications equipment from Huawei Technologies and ZTE, citing unacceptable national security risks.

(With Reuters Inputs)