Internet Integrity Workshop

Welcome to the Second Internet Integrity Workshop!

This open, three-hour, in-person session will take place on the morning of Monday, 20 October 2025, right before RIPE 91 officially begins. A diverse lineup of speakers will explore measurement for action from multiple perspectives, sharing achievements, challenges, and lessons from their own projects.

We will also keep the regulatory context and troubling abuse statistics in view— not as an endpoint, but as an incentive for deeper collaboration and change.

Setting the Context

The world relies on a secure and stable Internet, including the services and applications offered over it. As malicious actors —individual, corporate and state— are increasingly active in attacking the Internet and any infrastructure accessible from it, there is increasing scrutiny of reliability and resiliency of Internet services at all levels. Measurements can play an important role both in demonstrating the actual state of Internet infrastructure security and the progress industry and individual actors are making, and in stimulating laggers to take necessary actions.

Broadly, there are two types of measurements related to Internet infrastructure security that we would like to consider in this workshop:

• Measurements that track the deployment of security technologies and controls on different levels and by different actors, and
• Measurements that indicate the security and resilience level of the Internet infrastructure

Although the deployment of security technologies is aimed at reducing risks and vulnerabilities of the Internet infrastructure and thus making it more secure and reliable, the two types of measurements are rarely correlated, to say nothing about proving causality between the two.

On site at the RIPE meeting, we are having a 3-hour session to discuss key performance indicators for the Internet infrastructure:

• How can measurements stimulate improvements in key areas?
• How should these improvements —or lack thereof— be reported?
• Can we demonstrate correlation between the actions and the outcomes or even causality?

We are inviting presentations to illustrate the topic areas, and then aim to have discussion to compare approaches, share what is actually working —or not—, and talk about how we can meaningfully report on security improvements in operational environments.

If you are running routing infrastructure, DNS services, or hosting platforms, your input will be especially valuable. This is intended to be an open, technical discussion— no marketing, just shared experience.