The automatic peer-to-peer signature for source address validation

Authors:
Yan Shen;Jun Bi;Jianping Wu;Qiang Liu
Affiliations:
Network Research Center, Tsinghua University, Beijing, China;Network Research Center, Tsinghua University, Beijing, China;Network Research Center, Tsinghua University, Beijing, China;Network Research Center, Tsinghua University, Beijing, China
Venue:
KES'07/WIRN'07 Proceedings of the 11th international conference, KES 2007 and XVII Italian workshop on neural networks conference on Knowledge-based intelligent information and engineering systems: Part I
Year:
2007

Citing 11
Cited 0

Random number generators: good ones are hard to find

Communications of the ACM
Mersenne twister: a 623-dimensionally equidistributed uniform pseudo-random number generator

ACM Transactions on Modeling and Computer Simulation (TOMACS) - Special issue on uniform random number generation
Tradeoffs in probabilistic packet marking for IP traceback

STOC '02 Proceedings of the thiry-fourth annual ACM symposium on Theory of computing
Single-packet IP traceback

IEEE/ACM Transactions on Networking (TON)
Hop-count filtering: an effective defense against spoofed DDoS traffic

Proceedings of the 10th ACM conference on Computer and communications security
SPIE-IPv6: Single IPv6 Packet Traceback

LCN '04 Proceedings of the 29th Annual IEEE International Conference on Local Computer Networks
Measuring the evolution of transport protocols in the internet

ACM SIGCOMM Computer Communication Review
Efficient and secure source authentication with packet passports

SRUTI'06 Proceedings of the 2nd conference on Steps to Reducing Unwanted Traffic on the Internet - Volume 2
Inferring internet denial-of-service activity

SSYM'01 Proceedings of the 10th conference on USENIX Security Symposium - Volume 10
A lightweight IP traceback mechanism on IPv6

EUC'06 Proceedings of the 2006 international conference on Emerging Directions in Embedded and Ubiquitous Computing
On IP traceback

IEEE Communications Magazine

Quantified Score

Hi-index	0.00

Visualization

Abstract

SPM (Spoofing Prevention Method) proposed a peer-to-peer anti-spoofing method which could effectively filter spoofed packets and support incremental deployment. However, mechanism of SPM key updating has some serious problems: (1) heavy management cost; (2) risk of becoming the target of DOS/DDOS attacks during the key updating; (3) limitation of the scale of the SPM union; (4) impossibility of tackling the threat of real-time packet sniffing. This paper proposes an Automatic Peer-to-Peer Anti-spoofing Method (APPA). APPA resolves the key management problem and could effectively prevent source address spoofing.