Routing in trustworthy networks with SAVA nodes
Rongxi He, Limin Song, Xudong Wang, Bin Lin · 2010
In a trustworthy network with the mechanism of Source Address Validation Architecture (SAVA), each packet received and forwarded has been ensured to hold an authenticated source IP address, which can prevent the attackers to forge the originating IP address to evade responsibility for their malicious packets. However, it is impossible to deploy SAVA all over the Internet in one night. In this paper, we investigate the SAVA mechanism from the point of routing for a trustworthy network with a partial deployment of SAVA nodes. We propose a new routing algorithm, called Minimum Hop to First SAVA node (MHFS). Extensive simulations show that MHFS can not only guarantee that each route for packets includes at least one SAVA node, but also achieve a better successful probability for routing packets and a improvement in resource usage.