Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers

被引：6

作者：

Korczyriski, Maciej ^{[1
]}

Nosyk, Yevheniya ^{[1
]}

Lone, Qasim ^{[2
]}

Skwarek, Marcin ^{[1
]}

Jonglez, Baptiste ^{[1
]}

Duda, Andrzej ^{[1
]}

机构：

[1] Univ Grenoble Alpes, Grenoble, France

[2] Deft Univ Technol, Delft, Netherlands

来源：

PROCEEDINGS OF THE 2020 APPLIED NETWORKING RESEARCH WORKSHOP, ANRW 2020 | 2020年

关键词：

D O I：

10.1145/3404868.3406668

中图分类号：

TP31 [计算机软件];

学科分类号：

081202 ; 0835 ;

摘要：

This paper reports on the first Internet-wide active measurement study to enumerate networks not filtering incoming packets based on their source address. Our method identifies closed and open DNS resolvers handling requests from the outside of the network with the source address in the prefix of the tested network. The study gives the most complete picture of the inbound Source Address Validation deployment at network providers: 32,673 IPv4 ASes and 197,641 IPv4 BGP prefixes are vulnerable to spoofing of inbound traffic.

引用

页码：9 / 11

页数：3

共 50 条

[21] Building a next generation Internet with source address validation architecture
JianPing Wu
Gang Ren
Xing Li
Science in China Series F: Information Sciences, 2008, 51 : 1681 - 1691
[22] Understanding the Efficacy of Deployed Internet Source Address Validation Filtering
Beverly, Robert
Berger, Arthur
Hyun, Young
Claffy, K.
IMC'09: PROCEEDINGS OF THE 2009 ACM SIGCOMM INTERNET MEASUREMENT CONFERENCE, 2009, : 356 - 369
[23] Building a next generation Internet with source address validation architecture
Wu JianPing
Ren Gang
Li Xing
SCIENCE IN CHINA SERIES F-INFORMATION SCIENCES, 2008, 51 (11): : 1681 - 1691
[24] The automatic peer-to-peer signature for source address validation
Shen, Yan
Bi, Jun
Wu, Jianping
Liu, Qiang
KNOWLEDGE-BASED INTELLIGENT INFORMATION AND ENGINEERING SYSTEMS: KES 2007 - WIRN 2007, PT I, PROCEEDINGS, 2007, 4692 : 855 - +
[25] SAVSH: IP Source Address Validation for SDN Hybrid Networks
Chen, Guolong
Hu, Guangwu
Jiang, Yong
Zhang, Chaoqin
2016 IEEE SYMPOSIUM ON COMPUTERS AND COMMUNICATION (ISCC), 2016, : 409 - 414
[26] HARMS-based Service Discovery Protocol using Address-DNS
Lee, Kyuhwan
Yeo, Yunsuk
Chung, Tai-Myoung
10TH INTERNATIONAL CONFERENCE ON FUTURE NETWORKS AND COMMUNICATIONS (FNC 2015) / THE 12TH INTERNATIONAL CONFERENCE ON MOBILE SYSTEMS AND PERVASIVE COMPUTING (MOBISPC 2015) AFFILIATED WORKSHOPS, 2015, 56 : 133 - 138
[27] An hierarchical inter-domain authenticated source address validation solution
Li, Jie
Wu, Jian-Ping
Xu, Ke
Chen, Wen-Long
Jisuanji Xuebao/Chinese Journal of Computers, 2012, 35 (01): : 85 - 100
[28] Design and Implementation of an IPv6 Source Address Validation Device
Yao, Guang
Bi, Jun
FOURTH INTERNATIONAL CONFERENCE ON NETWORKING AND SERVICES (ICNS 2008), PROCEEDINGS, 2008, : 236 - 241
[29] An IPv6 source address validation testbed and prototype implementation
Bi, Jun
Yao, Guang
Wu, Jianping
Journal of Networks, 2009, 4 (02) : 100 - 107
[30] SEND-based Source Address Validation for IPv6
Kukec, A.
Bagnulo, M.
Mikuc, M.
CONTEL 2009: PROCEEDINGS OF THE 10TH INTERNATIONAL CONFERENCE ON TELECOMMUNICATIONS, 2009, : 199 - +

← 1 2 3 4 5 →