NDLI: A two-level source address spoofing prevention based on automatic signature and verification mechanism

Content Provider	IEEE Xplore Digital Library
Author	Yan Shen Jun Bi Jianping Wu Qiang Liu
Copyright Year	2008
Description	Author affiliation: Network Res. Center, Tsinghua Univ., Beijing (Yan Shen; Jun Bi; Jianping Wu; Qiang Liu)
Abstract	IP source address spoofing is used by DDoS and DrDoS attacks in the Internet. This paper presents a signature-and-verification based IP spoofing prevention method, automatic peer-to-peer based anti-spoofing method (APPA). APPA has two levels: intra-AS (autonomous system) level and inter-AS level. In the intra-AS level, the end host tags a one-time key into each outgoing packet and the gateway at the AS border verifies the key. In inter-AS level, the gateway at the AS border tags a periodically changed key into the leaving packet and the gateway at border of the destination AS verifies and removes the key. The most prominent characteristic of APPA is the automatically synchronizing state-machine, which is used to update keys automatically and effectively. The benefits of APPA are: (1) preventing IP address spoofing strictly, end systems canpsilat even spoof addresses in the same AS or subnet, (2) providing very low running and management costs, (3) supporting anti-replay attacks and incremental deployment.
Starting Page	392
Ending Page	397
File Size	2361224
Page Count	6
File Format	PDF
ISBN	9781424427024
ISSN	15301346
DOI	10.1109/ISCC.2008.4625684
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2008-07-06
Publisher Place	Morocco
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Logic gates IP networks Internet Synchronization Authentication Filtering Bandwidth
Content Type	Text
Resource Type	Article
Subject	Signal Processing Mathematics Computer Networks and Communications Computer Science Applications Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Segment Level Authentication: Combating internet source spoofing

MIB design and application for source address validation improvement protocol

NPLA: Network Prefix Level Authentication

Two level Authentication and Packet Marking Mechanism for Defending against DoS and DDoS Attacks

Towards a Cooperative Mechanism Based Distributed Source Address Filtering

A CGA based IP source address authentication method in IPv6 access network

Understanding the efficacy of deployed internet source address validation filtering

Hint-driven DNS resolution

A design of egress NAC using an authentication visa checking mechanism to protect against MAC address spoofing attacks

A two-level source address spoofing prevention based on automatic signature and verification mechanism

Similar Documents

Segment Level Authentication: Combating internet source spoofing

MIB design and application for source address validation improvement protocol

NPLA: Network Prefix Level Authentication

Two level Authentication and Packet Marking Mechanism for Defending against DoS and DDoS Attacks

Towards a Cooperative Mechanism Based Distributed Source Address Filtering

A CGA based IP source address authentication method in IPv6 access network

Understanding the efficacy of deployed internet source address validation filtering

Hint-driven DNS resolution

A design of egress NAC using an authentication visa checking mechanism to protect against MAC address spoofing attacks

A two-level source address spoofing prevention based on automatic signature and verification mechanism