Toward incentivizing anti-spoofing deployment

IEEE Transactions on Information Forensics and Security

Volumn 9, Issue 3, 2014, Pages 436-450

  Liu, Bingyang ^a,b   Bi, Jun ^a,b   Vasilakos, Athanasios V ^c  

^a TSINGHUA UNIVERSITY   (China)

^b TSINGHUA NATIONAL LABORATORY FOR INFORMATION SCIENCE AND TECHNOLOGY   (China)

^c UNIVERSITY OF WESTERN MACEDONIA   (Greece)

Author keywords

deployment incentive; DoS defense; IP spoofing; spoofing prevention

Indexed keywords

ACCESS CONTROL LISTS; ANALYSIS AND SIMULATION; AUTONOMOUS SYSTEMS; COMPRESSION ALGORITHMS; DEPLOYMENT INCENTIVE; EVALUATION RESULTS; IP SPOOFING; SPOOFING PREVENTION;

ALGORITHMS; INTERNET; SYSTEMS ANALYSIS;

INTERNET PROTOCOLS;

EID: 84896839864     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2013.2296437     Document Type: Article

References (37)

1. R. Vaughn and G. Evron. (2006). DNS Amplification Attacks [Online]. Available: http://www.isotf.org/news/DNS-Amplification-Attacks.pdf
2. P. Ferguson and D. Senie. (2000). Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing [Online]. Available: http://tools.ietf.org/html/rfc2827
3. F. Baker and P. Savola. (2004, Mar.). Ingress filtering for multihomed networks [Online]. Available: http://tools.ietf.org/html/rfc3704
4. (2013, Sep. 1). Spoofer Project [Online]. Available: http://spoofer. cmand.org/index.php
5. R. Beverly, A. Berger, Y. Hyun, and K. Claffy, "Understanding the efficacy of deployed internet source address validation filtering, " in Proc. IMC, 2009, pp. 356-369.
6. F. Bulk. (2009, Jan.). Are We Really This Helpless? (Re: Isprime DOS in Progress) http://mailman.nanog.org/pipermail/nanog/2009-January/006996.html
7. R. Dobbins and C. Morales, Worldwide Infrastructure Security Report, vol. 6. Burlington, MA, USA: Arbor Networks, 2010.
8. M. Prince. (2013). The DDoS That Almost Broke the Internet [Online]. Available: http://www.heliontech.com/aes.htm
9. B. Liu, J. Bi, and Y. Zhu, "A deployable approach for inter-As anti-spoofing, " in Proc. 19th IEEE ICNP, Oct. 2011, pp. 19-24.
10. J. Wu, J. Bi, X. Li, G. Ren, K. Xu, and M. I. Williams. (2008, Jun.). A Source Address Validation Architecture (Sava) Testbed and Deployment Experience [Online]. Available: http://tools.ietf.org/html/rfc5210
11. J. Mirkovic and E. Kissel, "Comparative evaluation of spoofing defenses, " IEEE Trans. Depend. Secure Comput., vol. 8, no. 2, pp. 218-232, Mar./Apr. 2011.
12. K. Park and H. Lee, "On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets, " in Proc. Conf. Appl., Technol., Archit., Protocols Comput. Commun., Oct. 2001, pp. 15-26. (Pubitemid 32981951)
13. A. Bremler-Barr and H. Levy, "Spoofing prevention method, " in Proc. 24th Annu. Joint Conf. IEEE Comput. Commun. Soc., vol. 1. Mar. 2005, pp. 536-547. (Pubitemid 41390849)
14. Z. Duan, X. Yuan, and J. Chandrashekar, "Constructing inter-domain packet filters to control IP spoofing based on BGP updates, " in Proc. INFOCOM, 2006, pp. 1-12.
15. J. Li, J. Mirkovic, M. Wang, P. Reiher, and L. Zhang, "SAVE: Source address validity enforcement protocol, " in Proc. INFOCOM, 2002, pp. 1557-1566.
16. A. Yaar, A. Perrig, and D. Song, "StackPi: New packet marking and filtering mechanisms for DDoS and IP spoofing defense, " IEEE J. Sel. Areas Commun., vol. 24, no. 10, pp. 1853-1863, Oct. 2006. (Pubitemid 44559599)
17. X. Liu, A. Li, X. Yang, and D. Wetherall, "Passport: Secure and adoptable source authentication, " in Proc. 5th USENIX Symp. NSDI, 2008, pp. 365-378.
18. (2013, Aug. 30). RIPE IP Anti-Spoofing Task Force [Online]. Available: http://www.ripe.net/ripe/groups/tf/anti-spoofing
19. (2012). BCP38 Deployment[Online].Available:http://mailman.nanog.org/ pipermail/nanog/2012-March/047093.html
20. (2012). BCP38 Deployment [Online]. Available: http://mailman.nanog. org/pipermail/nanog/2012-March/047087.html
21. J. Bi and B. Liu. (2012). Problem Statement of SAVI Beyond the First Hop (V4) [Online]. Available: http://tools.ietf.org/html/draft-bi-savi-problem-04
22. B. Liu, J. Bi, and X. Yang, "FaaS: Filtering IP spoofing traffic as a service, " ACM SIGCOMM Comput. Commun. Rev., vol. 42, no. 4, pp. 113-114, Oct. 2012.
23. M. Lepinski and S. Kent. (2012). An infrastructure to support secure internet routing [Online]. Available: http://tools.ietf.org/html/rfc6480
24. (2013, Dec. 1). Number Resources [Online]. Available: http://www.iana.org/numbers
25. W. Zhou, L. Wang, and W. Jia, "An analysis of update ordering in distributed replication systems, " Future Generat. Comput. Syst., vol. 20, no. 4, pp. 565-590, 2004.
26. C. J. Fidge, "Timestamps in message-passing systems that preserve the partial ordering, " in Proc. 11th Austral. Comput. Sci. Conf., vol. 10. 1988, no. 1, pp. 56-66.
27. M. Chtepen, F. H. Claeys, B. Dhoedt, F. De Turck, P. Demeester, and P. A. Vanrolleghem, "Adaptive task checkpointing and replication: Toward efficient fault-tolerant grids, " IEEE Trans. Parallel Distrib. Syst., vol. 20, no. 2, pp. 180-190, Feb. 2009.
28. (2013, Dec. 1). Configuring IP Access Lists [Online]. Available: http://www.cisco.com/en/US/products/sw/secursw/ps1018/products-tech- note09186a00800a5b9a.shtml
29. F. Soldo, K. Argyraki, and A. Markopoulou, "Optimal source-based filtering of malicious traffic, " IEEE/ACM Trans. Netw., vol. 20, no. 2, pp. 381-395, Apr. 2012.
30. (2012, Oct. 11). Routeviews Prefix to AS Mappings [Online]. Available: http://data.caida.org/datasets/routing/routeviews-prefix2as/
31. (2012, Oct. 11). Internet Topology Collection [Online]. Available: http://irl.cs.ucla.edu/topology
32. B. Quoitin. (2012, Oct. 12). C-BGP [Online]. Available: http://c-bgp.sourceforge.net
33. D. Moore, C. Shannon, D. J. Brown, G. M. Voelker, and S. Savage, "Inferring internet denial-of-service activity, " ACM Trans. Comput. Syst., vol. 24, no. 2, pp. 115-139, 2006.
34. (2013, Dec. 4). Cidr Report [Online]. Available: http://www.cidr-report. org/as2.0/
35. (2013, Aug. 2). Google Public DNS: 70 Billion Requests a Day and Counting [Online]. Available: http://googleblog. blogspot.com/2012/02/google-public-dns- 70-billion-requests.html
36. M. L. D. M. Roy Arends, R. Austein, and S. Rose. (2005). DNS security introduction and requirements [Online]. Available: http://tools.ietf.org/html/ rfc4033
37. R. Cornes, The Theory of Externalities, Public Goods, and Club Goods. Cambridge, U.K.: Cambridge Univ. Press, 1996.