Title :
A Multi-fence Countermeasure Based Inter-domain Source Address Validation Method
Author :
Jie Li ; Jun Bi ; Jianping Wu ; Wei Zhang
Author_Institution :
Dept. Comput. Sci. & Technol., Tsinghua Univ., Beijing, China
Abstract :
The functional deficiency of the Internet architecture enables attackers the ability to easily to spoof IP source address. The traditional signature-and-verification based anti-spoofing methods are often limited by essential process based on an explicit analysis and process of the IP header and does not adapt to incremental deployment. This paper designs a multi-fence countermeasure based inter-domain source address validation method named VIP. By employing intelligent originating information label and extended MPLS based cloud and network, VIP enables lightweight-label-based packet forwarding and validation. And VIP offers gains in efficiency by reducing the load on both forwarding tables and validation processing without negative influences and complex operations on de facto networks. In addition to enhanced scalability, VIP may facilitate incremental deployment in the long run.
Keywords :
IP networks; Internet; computer network security; multiprotocol label switching; IP header; IP source address; Internet architecture; VIP; extended MPLS based cloud; extended MPLS based network; functional deficiency; intelligent originating information label; interdomain source address validation method; lightweight-label-based packet forwarding; lightweight-label-based packet validation; load reduction; multifence countermeasure; signature-and-verification based antispoofing methods; Computer architecture; IP networks; Internet; Multiprotocol label switching; Oils; Routing; Security; IP source address validation; extended MPLS; inter-domain; network security;
Conference_Titel :
Network Computing and Applications (NCA), 2012 11th IEEE International Symposium on
Conference_Location :
Cambridge, MA
Print_ISBN :
978-1-4673-2214-0
DOI :
10.1109/NCA.2012.20
