Enable a trustworthy network by source address spoofing prevention routers: a formal description

Authors:
Jun Bi;Jianping Wu;Miao Zhang
Affiliations:
Network Research Center, Tsinghua University, Beijing, P.R. China;Network Research Center, Tsinghua University, Beijing, P.R. China;Network Research Center, Tsinghua University, Beijing, P.R. China
Venue:
EUC'06 Proceedings of the 2006 international conference on Emerging Directions in Embedded and Ubiquitous Computing
Year:
2006

Citing 6
Cited 1

Practical network support for IP traceback

Proceedings of the conference on Applications, Technologies, Architectures, and Protocols for Computer Communication
On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets

Proceedings of the 2001 conference on Applications, technologies, architectures, and protocols for computer communications
Pi: A Path Identification Mechanism to Defend against DDoS Attacks

SP '03 Proceedings of the 2003 IEEE Symposium on Security and Privacy
Hop-count filtering: an effective defense against spoofed DDoS traffic

Proceedings of the 10th ACM conference on Computer and communications security
The spoofer project: inferring the extent of source address filtering on the internet

SRUTI'05 Proceedings of the Steps to Reducing Unwanted Traffic on the Internet on Steps to Reducing Unwanted Traffic on the Internet Workshop
StackPi: New Packet Marking and Filtering Mechanisms for DDoS and IP Spoofing Defense

IEEE Journal on Selected Areas in Communications

New routing algorithms in trustworthy Internet

Computer Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

The lack of verifying source address in Internet makes it easy for attackers to spoof the source IP address. One of challenges of Internet has been recognized is building mechanisms in routers to verify the source address. This paper discusses Source Address Spoofing Prevention (SASP) mechanisms, presents a formal description on SASP network and SASP router, proposes a hierarchical SASP architecture, and presents some design principles of SASP mechanisms.