Threat landscape and good practice guide for Internet infrastructure

The Internet infrastructure supports the global exchange of information through physical and logical assets, such as cables, servers, protocols, services... These assets suffer from various threats that can hamper network connectivity and disrupt the Internet. As a threat landscape, this study gives a detailed overview of the current threats applicable to the Internet infrastructure and their trends, so that Internet infrastructure owners can improve their security using good practices. For that purpose, this study details the assets of Internet infrastructure (structured into eight types: hardware, software, information, human resources, protocols, services, interconnections, and infrastructure) and list the threats applicable to these Internet infrastructure assets. These results are structured into mind maps. The study then classifies Important Specific Threats of the Internet infrastructure - namely Routing threats, DNS threats, Denial of Service, and Generic threats - and links each threat with a list of assets exposed. As a good practice guide, this study details a list of good practices that aim at securing an Internet infrastructure asset from Important Specific Threats. A gap analysis identifies that some assets remain not covered by current good practices: human resources (administrators and operators) for Routing, DNS and Denial of Service, as well as System Configuration and Essential Addressing Protocols for Denial of Service.