Why are these errors happening?


Ad hoc process
Example: Filtering is rarely (if ever) done correctly.
Solution: Automation; build validity into BGP (e.g., S-BGP).

Obscure mechanisms
Example: iBGP signaling partitions
Solution: Redesign iBGP

Indirect specification
Example: Incorrect implementation of information flow policies
Solution: Better configuration languages