Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers

被引：6

作者：

Korczyriski, Maciej ^{[1
]}

Nosyk, Yevheniya ^{[1
]}

Lone, Qasim ^{[2
]}

Skwarek, Marcin ^{[1
]}

Jonglez, Baptiste ^{[1
]}

Duda, Andrzej ^{[1
]}

机构：

[1] Univ Grenoble Alpes, Grenoble, France

[2] Deft Univ Technol, Delft, Netherlands

来源：

PROCEEDINGS OF THE 2020 APPLIED NETWORKING RESEARCH WORKSHOP, ANRW 2020 | 2020年

关键词：

D O I：

10.1145/3404868.3406668

中图分类号：

TP31 [计算机软件];

学科分类号：

081202 ; 0835 ;

摘要：

This paper reports on the first Internet-wide active measurement study to enumerate networks not filtering incoming packets based on their source address. Our method identifies closed and open DNS resolvers handling requests from the outside of the network with the source address in the prefix of the tested network. The study gives the most complete picture of the inbound Source Address Validation deployment at network providers: 32,673 IPv4 ASes and 197,641 IPv4 BGP prefixes are vulnerable to spoofing of inbound traffic.

引用

页码：9 / 11

页数：3

共 50 条

[31] SAVT: A Practical Scheme for Source Address Validation and Traceback in Campus Network
Hu, Guangwu
Wu, Jianping
Xu, Ke
Chen, Wenlong
2011 20TH INTERNATIONAL CONFERENCE ON COMPUTER COMMUNICATIONS AND NETWORKS (ICCCN), 2011,
[32] SEC: Secure, Efficient, and Compatible Source Address Validation with Packet Tags
Yang, Xinyu
Cao, Jiahao
Xu, Mingwei
2020 IEEE 39TH INTERNATIONAL PERFORMANCE COMPUTING AND COMMUNICATIONS CONFERENCE (IPCCC), 2020,
[33] Inferring spatial source of disease outbreaks using maximum entropy
Ansari, Mehrad
Soriano-Panos, David
Ghoshal, Gourab
White, Andrew D.
PHYSICAL REVIEW E, 2022, 106 (01)
[34] Access Path Based Source Address Validation in Mobile IPv6
Zhu, Min
Xu, Ke
Li, Qi
NETWORK AND PARALLEL COMPUTING, 2011, 6985 : 334 - 349
[35] Trustworthy identity system based on IPv6 source address validation
Zhou, Duan-Qi
Bi, Jun
Yao, Guang
Tongxin Xuebao/Journal on Communications, 2014, 35 : 20 - 26
[36] SafeZone: A Hierarchical Inter-Domain Authenticated Source Address Validation Solution
Li, Jie
Wu, Jianping
Xu, Ke
2011 IEEE GLOBAL TELECOMMUNICATIONS CONFERENCE (GLOBECOM 2011), 2011,
[37] pSAV: A Practical and Decentralized Inter-AS Source Address Validation Service Framework
Cao, Jiamin
Liu, Ying
Liu, Mingxing
He, Lin
Jia, Yihao
Yang, Fei
2021 IEEE/ACM 29TH INTERNATIONAL SYMPOSIUM ON QUALITY OF SERVICE (IWQOS), 2021,
[38] Security of source address validation improvement binding table in software defined network
Li D.
Lu Y.
Yu J.-Q.
Zhejiang Daxue Xuebao (Gongxue Ban)/Journal of Zhejiang University (Engineering Science), 2020, 54 (08): : 1543 - 1549
[39] Using Semi-supervised Machine Learning to Address the Big Data Problem in DNS Networks
Watkins, Lanier
Beck, Sean
Zook, Jared
Buczak, Anna
Chavis, Jeffery
Robinson, William H.
Morales, Jose A.
Mishra, Samuel
2017 IEEE 7TH ANNUAL COMPUTING AND COMMUNICATION WORKSHOP AND CONFERENCE IEEE CCWC-2017, 2017,
[40] On the deployability evaluation model of internet inter-domain source address validation
Liu, Bing-Yang
Bi, Jun
Jisuanji Xuebao/Chinese Journal of Computers, 2015, 38 (03): : 500 - 514

← 1 2 3 4 5 →