Building a next generation Internet with source address validation architecture

Science in China, Series F: Information Sciences

Volumn 51, Issue 11 SPEC. ISS., 2008, Pages 1681-1691

  Wu, JianPing ^a,b   Ren, Gang ^a,b   Li, Xing ^a,b  

^a TSINGHUA UNIVERSITY   (China)

^b TSINGHUA NATIONAL LABORATORY FOR INFORMATION SCIENCE AND TECHNOLOGY   (China)

Author keywords

IP source address validation; Network architecture; Network security

Indexed keywords

EID: 54249166083     PISSN: 10092757     EISSN: 18622836     Source Type: Journal    
DOI: 10.1007/s11432-008-0142-x     Document Type: Article

References (17)

1. Kent S, Atkinson R. RFC2401. Security Architecture for the Internet Protocol. IETF, 1998
2. Bremler-Barr A, Levy H. Spoofing Prevention Method. IEEE INFOCOM, 2005
3. Ferguson P, Senie D. RFC2827. Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing. IETF, 2000
4. Park K, Lee H. On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets. ACM SIGCOMM, 2001
5. Li J, Mirkovic J, Wang M, et al. SAVE: Source address validity enforcement protocol. IEEE INFOCOM, 2002
6. Jin C, Wang H. Hop-count filtering: an effective defense against spoofed DDoS traffic. ACM CCS, 2003
7. Snoeren A, Partridge C, Sanchez L, et al. A Hash-based IP traceback. ACM SIGCOMM, 2001
8. Bellovin S, Leech M, Taylor T. ICMP traceback messages. IETF Internet Draft, draft-ietf-itrace-03, 2003
9. Lee H, Thing V, Xu Y, et al. ICMP traceback with cumulative path, an efficient solution for IP traceback. Information and Communications Security. LNCS, 2003. 124-135
10. Savage S, Wetherall D, Karlin A, et al. Practical network support for IP traceback. ACM SIGCOMM, 2000
11. A. Belenky N. Ansari 2003 IP traceback with deterministic packet marking IEEE Commun Lett 7 4 162 164
12. Wu J, Ren G, Li X. Source address validation: Architecture and protocol design. ICNP, 2007
13. Wu J, Bi J, Li X, et al. RFC5210. A source address validation architecture (SAVA) testbed and deployment experience. IETF, 2008
14. Wu J, Ren G, Bi J, et al. A first-hop source address validation solution for SAVA. IETF Internet Draft, draft-wu-sava-solution-firsthop-eap-00, 2007
15. Wu J, Bi J, Ren G, et al. Source Address validation architecture (SAVA) framework. IETF Internet Draft, draft-wu-sava-framework-01, 2007
16. Wu J, Ferguson P, Bi J, et al. Source Address verification architecture problem statement. IETF Internet Draft, draft-sava-problem-statement-02, 2007
17. L. Gao 2001 On inferring autonomous system relationships in the Internet IEEE/ACM Trans Network-Ing 9 6 733 745