In-band Network Telemetry Based Fine-Grained Traceability Against IP Address Spooling Attack
Runhu Wang, Zhuohao Wang, Dong Wang, Ying Liu · 2021
Address spoofing is a thorny problem encountered in the development of the Internet. The governance of address spoofing attacks includes tracking the location of the attacker in response to subsequent attacks. In this article, based on in-band telemetry, we propose a backtracking scheme for address spoofing flows, design a telemetry header for recording the forwarding path, and provide a fine-grained backtracking function embedded in the telemetry header. We analyze the throughput of each network from the telemetry data, and initially predict the source of address spoofing. We conducted experiments to test the feasibility and accuracy of telemetry traceability, and analyzed the overhead of the finegrained traceability mechanism. Experiments show that our method takes up low overhead costs while ensuring traceability and accuracy.