首页> 外文会议>IEEE International Symposium on Network Computing and Applications >A Multi-fence Countermeasure Based Inter-domain Source Address Validation Method
【24h】

A Multi-fence Countermeasure Based Inter-domain Source Address Validation Method

机译:基于多栅栏对策基于域间源地址验证方法

获取原文

摘要

The functional deficiency of the Internet architecture enables attackers the ability to easily to spoof IP source address. The traditional signature-and-verification based anti-spoofing methods are often limited by essential process based on an explicit analysis and process of the IP header and does not adapt to incremental deployment. This paper designs a multi-fence countermeasure based inter-domain source address validation method named VIP. By employing intelligent originating information label and extended MPLS based cloud and network, VIP enables lightweight-label-based packet forwarding and validation. And VIP offers gains in efficiency by reducing the load on both forwarding tables and validation processing without negative influences and complex operations on de facto networks. In addition to enhanced scalability, VIP may facilitate incremental deployment in the long run.
机译:Internet架构的功能缺陷使攻击者能够轻松地欺骗IP源地址。基于传统的签名和验证的防欺骗方法通常是基于IP标题的显式分析和过程的基本过程的限制,并且不适用于增量部署。本文设计了一种基于域间源地址验证方法的多栅栏对策。通过采用智能始发信息标签和扩展的基于MPLS的云和网络,VIP支持基于轻量级标签的数据包转发和验证。 VIP通过减少转发表和验证处理的负载而没有负面影响以及事实上的网络的复杂操作,提供了效率的提升。除了增强的可扩展性之外,VIP还可以长期促进递增部署。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号