The Effectiveness of Passport Source Address Validation Scheme

Passport is a new secure and adoptable source address validation technique, which has attracted fully attention. In this article, we research into the efficiency of Passport. First of all, we build a mathematical model to describe Passportpsilas function, then propose an evaluating indexes, at last we use Brite generate a Power-Law network topology and design correlative algorithm to quantitative analysis Passportpsilas efficiency. The study shows that: (1) Comparing with randomly deploying, the efficiency of vertex cover deploying is even higher; (2) Only deploying Passport in 54.3% AS can effectively defend the whole Internet against source address spoofing, although Passport will still cause large overload, it has been the most effectiveness source address validation scheme at recently.