Pilosov & Kapela Demonstrate Internet-Scale BGP Interception at DEF CON 16
On 10 August 2008 at DEF CON 16, Alex Pilosov and Anton "Tony" Kapela showed in "Stealing The Internet: An Internet-Scale Man In The Middle Attack" that a BGP prefix hijack could be turned into a stealthy interception: they diverted traffic bound for the conference network to a system in New York and delivered it back to Las Vegas.
02Deep-Dive Technical Analysis
The researchers announced more-specific prefixes (two /24s inside the 24.120.56.0/22 block of the DEF CON network's upstream) so that most of the Internet preferred their route. To keep a working return path, they prepended the ASNs of the networks on the intended reply path to the announcement; BGP loop prevention made those ASes ignore the bogus route, so a static route through them still reached the real destination. Adjusting TTL values on forwarded packets hid the extra hops from traceroute, leaving an altered AS path as the main visible trace.
03Vulnerability & Exploit Flow
More-specific BGP prefix hijack with AS-path prepending to preserve a return path and TTL adjustment to hide the interception point.
04Recommended Defense & Mitigation Protocol
Enforce customer prefix and AS-path filtering (MANRS), RPKI Route Origin Validation, real-time monitoring for unexpected more-specific announcements, and end-to-end encryption so intercepted traffic stays confidential.
05Security Impact & Geopolitical Consequence
Showed that BGP hijacks need not black-hole traffic and can intercept it silently, reframing route hijacking as an interception threat. It drove interest in real-time route monitoring, strict customer prefix filtering and, later, RPKI origin validation and BGPsec path security.
06Authoritative Standards & External References
07Related Topic Cluster Records
Master 5G Core, SS7 Defense & Subsea Cable Auditing
Ready to turn your historical knowledge into certified hands-on expertise? Register free on TelcoSec Academy to access interactive lab challenges, or consult our enterprise team for carrier-grade signaling assessments and portable BTS hardware.