Source address validation: Architecture and protocol design

Proceedings - International Conference on Network Protocols, ICNP

Volumn , Issue , 2007, Pages 276-283

  Wu, Jianping ^a   Ren, Gang ^a   Li, Xing ^a  

^a TSINGHUA UNIVERSITY   (China)

Author keywords

Authenticated source IP address; Source address validation architecture

Indexed keywords

ADDRESS SPACE; BACK BONE NETWORK; CHINA NEXT GENERATION INTERNET PROJECT (CNGI); DESIGN GOALS; INCREMENTAL DEPLOYMENT; INTERNATIONAL CONFERENCES; IP ADDRESSES; LOOSE COUPLINGS; PROTOCOL DESIGNS; SOURCE ADDRESS; TRANSITION (JEL CLASSIFICATIONS:E52 ,E41 ,E31);

ARCHITECTURE; COMPUTER ARCHITECTURE; INTERNET; INTERNET PROTOCOLS; NETWORK ARCHITECTURE; NETWORK PROTOCOLS;

ARCHITECTURAL DESIGN;

EID: 48349112377     PISSN: 10921648     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNP.2007.4375858     Document Type: Conference Paper

References (18)

1. R. Beverly, S. Bauer. "The Spoofer Project: Inferring the Extent of Source Address Filtering on the Internet", USENIX SRUTI 2005
2. S. Kent, R. Atkinson, "Security Architecture for the Internet Protocol", RFC2401,1998
3. P. Ferguson, D. Senie, "Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing" RFC2827,2000
4. K. Park, H. Lee, "On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets" , ACM SIGCOMM 2001
5. J. Li, J. Mirkovic, M. Wang, P. Reiher, and L. Zhang, "SAVE: Source Address Validity Enforcement Protocol" , IEEE INFOCOM 2002
6. C. Jin, H. Wang, "Hop-count filtering: an effective defense against spoofed DDoS traffic", ACM CCS,2003
7. A. Bremler-Barr, H. Levy, "Spoofing Prevention Method", IEEE INFOCOM2005
8. A. Snoeren, C.Partridge, L.Sanchez, C. Jones, F. Tchakountio, S. Kent,and W. Strayer, "A Hash-based IP traceback", ACM SIGCOMM 2001
9. S. Bellovin, M. Leech, and T. Taylor, "ICMP Traceback messages", IETF Internet Draft, draft-ietf-itrace -03, 2003
10. H. Lee, V. Thing, Y. Xu, and M. Ma, "ICMP Traceback with Cumulative Path, An Effcient Solution for IP Traceback", Information and Communications Security.LNCS.2003.124-135.
11. S. Savage, D. Wetherall, A. Karlin, T. Anderson, "Pratical network support for IP traceback", ACM SIGCOMM 2000
12. A. Belenky, N.Ansari, "IP Traceback With Deterministic Packet Marking" ,IEEE COMMUNICATIONS LETTERS,2003
13. J.Wu, R.Bonica, J.Bi, X.Li, G.Ren, M. Williams, "Source Address Validation Architecture Problem Statement", IETF Internet Draft, draft-sava-problem-statement-00, 2007
14. J.Wu, J.Bi, G.Ren, X.Li, R.Bonica,"Source Address Validation Architecture (SAVA) Framework", IETF Internet Draft, draft-wu-sava- framework-00, 2007
15. J.Wu,J.Bi,X. Li,G.Ren, M. Williams,"SAVA Testbed and Experiences to Date", IETF Internet Draft, draft-wu-sava-testbed-experience-00, 2007
16. L. Gao, "On Inferring Autonomous System Relationships in the Internet", IEEE/ACM Transactions on Networking. Volume 9.Issue 6.2001.733-745.
17. F. Baker, P. Savola, "Ingress Filtering for Multihomed Networks", RFC 3704,2004
18. F. Dupont, C. Castelluccia, "IPv6 Network Ingress Filtering" ,IETF Internet draft, draft-dupont-ipv6-ingress-filtering-00, 2002