Bootstrapping accountability in the internet we have
Ang Leo Li, Xin Liu, Xiaowei Yang · 2011
The lack of accountability makes the Internet vulnerable to numerous attacks, including prefix hijacking, route forgery, source address spoofing, and DoS flooding attacks. This paper takes a “dirty-slate ” approach to bring accountability to the present Internet with low-cost and deployable enhancements. Our design, IPA, uses the readily available top-level DNSSEC infrastructure and BGP to bootstrap accountability. We integrate it with a suite of security building blocks to combat various network-layer attacks. Our evaluation shows that IPA introduces modest overhead, is gradually deployable, and offers incentives for early adoption. 1