Towards Spoofing Prevention Based on Hierarchical Coordination Model
Gaofeng Lv, Zhigang Sun · 2007
A novel approach for filtering spoofed IP packets, called spoofing prevention based on hierarchical coordination model, is proposed. In the approach a unique temporal signature is associated with each ordered pair of source destination networks. Each packet leaving a source network S is marked with the signature Sig(S,D) , associated with (S,D) , where D is the destination network. Upon arrival at the destination network the signature is verified and removed. The method verifies the authenticity of packets carrying the address s which belongs to the source address space of network S indexed by the signature. While the information about source address spaces of network is transmitted by hierarchical coordination model, in which by the same method the information is propagated and processed for routers residing in the same hierarchical, furthermore using dynamic bloom filter the information is fused to be delivered over hierarchies, thus the implementation is efficient The major benefits of SP-HCM are the strong incentive it provides to network operators to implement it, and the fact that the approach lends itself to stepwise deployment, since it benefits networks deploying the approach even if it is implemented only on parts of the Internet.