An incrementally deployable anti-spoofing mechanism for software-defined networks
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Kwon, Jonghoon | - |
dc.contributor.author | Seo, Dongwon | - |
dc.contributor.author | Kwon, Minjin | - |
dc.contributor.author | Lee, Heejo | - |
dc.contributor.author | Perrig, Adrian | - |
dc.contributor.author | Kim, Hyogon | - |
dc.date.accessioned | 2021-09-04T15:03:56Z | - |
dc.date.available | 2021-09-04T15:03:56Z | - |
dc.date.created | 2021-06-16 | - |
dc.date.issued | 2015-06-15 | - |
dc.identifier.issn | 0140-3664 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/93252 | - |
dc.description.abstract | Internet attacks often use IF spoofing to forge the source IF address of packets, and thereby hide the identity of the source. It causes many serious security problems such as the difficulty of packet authenticity and IP traceback. While many IP spoofing prevention techniques have been proposed apart from ingress filtering, none have achieved widespread real-world use. One main reason is the lack of properties favoring incremental deployment, an essential component for new technology adoption. An incrementally deployable protocol should have three properties: initial benefits for early adopters, incremental benefits for subsequent adopters, and effectiveness under partial deployment. Since no previous antispoofing solution satisfies all three properties, we propose an anti-spoofing mechanism called "BGP-based Anti-Spoofing Extension" (BASE). BASE is an anti-spoofing protocol designed to fulfill the incremental deployment properties. Furthermore, BASE is designed to work in the software-defined networks (SDN). It gives a motivation to network operators to adopt BASE into their network, since the idea of SDN supports the large scale network control with a simple operation. Based on simulations using a model of Internet connectivity, BASE shows desirable IP spoofing prevention capabilities under partial deployment. We find that just 30% deployment can drop about 97% of attack packets. It is shown that BASE not only provides benefits to early adopters, but also outperforms previous anti-spoofing mechanisms. (C) 2015 Elsevier B.V. All rights reserved. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | ELSEVIER SCIENCE BV | - |
dc.title | An incrementally deployable anti-spoofing mechanism for software-defined networks | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Lee, Heejo | - |
dc.contributor.affiliatedAuthor | Kim, Hyogon | - |
dc.identifier.doi | 10.1016/j.comcom.2015.03.003 | - |
dc.identifier.wosid | 000358100900001 | - |
dc.identifier.bibliographicCitation | COMPUTER COMMUNICATIONS, v.64, pp.1 - 20 | - |
dc.relation.isPartOf | COMPUTER COMMUNICATIONS | - |
dc.citation.title | COMPUTER COMMUNICATIONS | - |
dc.citation.volume | 64 | - |
dc.citation.startPage | 1 | - |
dc.citation.endPage | 20 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalResearchArea | Engineering | - |
dc.relation.journalResearchArea | Telecommunications | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.relation.journalWebOfScienceCategory | Engineering, Electrical & Electronic | - |
dc.relation.journalWebOfScienceCategory | Telecommunications | - |
dc.subject.keywordAuthor | Distributed DoS attack | - |
dc.subject.keywordAuthor | IP spoofing prevention | - |
dc.subject.keywordAuthor | Packet marking and filtering | - |
dc.subject.keywordAuthor | BGP-based anti-spoofing extension | - |
dc.subject.keywordAuthor | SDN security | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(02841) 서울특별시 성북구 안암로 14502-3290-1114
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.