.png){kind=icon}
返回
Toward Practical Inter-Domain Source Address Validation
.png){kind=icon}
PRE
AI
DOI：10.1109/TNET.2024.3377116.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The Internet Protocol (IP) is the most fundamental building block of the Internet. However, it provides no explicit notion of packet-level authenticity. Such a weakness allows malicious actors to spoof IP packet headers and launch a wide variety of attacks. Meanwhile, the highly decentralized management of Internet infrastructure makes large-scale source address validation challenging in terms of overhead, validity, and flexibility. This paper presents a practical anti-spoofing approach, Source Address Validation Architecture eXternal (SAVA-X). SAVA-X introduces the concept of Address Domain to enable address validation in finer, prefix-level granularity. The address domains are organized in nested hierarchies to provide higher scalability and lower maintenance costs for partial deployment. We implement SAVA-X on commercial backbone routers and the P4 platform. The experiments indicate that the hardware implementation of SAVA-X can achieve 98% throughput on 100 Gbps links and close to the native IP forwarding in per-packet overhead, with less than 10 microseconds additional processing latency.
Keyword:
Network security
source address validation
hierarchical validation
期刊
I
IF:
3.6
论文数:
4.4K
被引数:
9.5K
机构
引用论文
Biophysical chemistry of cartilaginous tissues with special reference to solute and fluid transport1.png)
Biorheology
BiorheologyIF0
PREAI
分享收藏
Enhanced removal of Cr(VI) by silicon rich biochar-supported nanoscale zero-valent ironChemosphere
ChemosphereIF0
PREAI
分享收藏In vitro studies on milk properties of the indigenous breed Capra prisca in nitric oxide stimulation体外研究硝酸刺激下土著品种Capra prisca的牛奶特性
PREAI
分享收藏P.356Nusinersen in infants who initiate treatment in a presymptomatic stage of spinal muscular atrophy: interim results from the phase 2 NURTURE studyP.356 在症状前阶段的脊髓性肌萎缩症婴儿中启动努西奈瑞森治疗：NURTURE II期研究的初步结果
PREAI
分享收藏
查看更多内容