The Effectiveness of Passport Source Address Validation Scheme
Ning-ning Lu, Huachun Zhou, Hongke Zhang · 2009
Passport is a new secure and adoptable source address validation technique, which has attracted fully attention. In this article, we research into the efficiency of Passport. First of all, we build a mathematical model to describe Passport’s function, then propose an evaluating indexes, at last we use Brite generate a Power-Law network topology and design correlative algorithm to quantitative analysis Passport’s efficiency. The study shows that: (1) Comparing with randomly deploying, the efficiency of Vertex Cover deploying is even higher; (2) Only deploying Passport in 54.3% AS can effectively defend the whole Internet against source address spoofing, although Passport will still cause large overload, it has been the most effectiveness source address validation scheme at recently.