Skip to main content

Bootstrapping accountability in the internet we have

Publication ,  Conference
Li, A; Liu, X; Yang, X
Published in: Proceedings of NSDI 2011: 8th USENIX Symposium on Networked Systems Design and Implementation
January 1, 2011

Lack of accountability makes the Internet vulnerable to numerous attacks, including prefix hijacking, route forgery, source address spoofing, and DoS flooding attacks. This paper aims to bring accountability to the Internet with lowcost and deployable enhancements. We present IPA, a design that uses the readily available toplevel DNSSEC infrastructure and BGP to bootstrap accountability. We show how IPA enables a suite of security modules that can combat various networklayer attacks. Our evaluation shows that IPA introduces modest overhead and is gradually deployable. We also discuss how the design incentivizes early adoption.

Duke Scholars

Published In

Proceedings of NSDI 2011: 8th USENIX Symposium on Networked Systems Design and Implementation

Publication Date

January 1, 2011

Start / End Page

155 / 168
 

Citation

APA
Chicago
ICMJE
MLA
NLM
Li, A., Liu, X., & Yang, X. (2011). Bootstrapping accountability in the internet we have. In Proceedings of NSDI 2011: 8th USENIX Symposium on Networked Systems Design and Implementation (pp. 155–168).
Li, A., X. Liu, and X. Yang. “Bootstrapping accountability in the internet we have.” In Proceedings of NSDI 2011: 8th USENIX Symposium on Networked Systems Design and Implementation, 155–68, 2011.
Li A, Liu X, Yang X. Bootstrapping accountability in the internet we have. In: Proceedings of NSDI 2011: 8th USENIX Symposium on Networked Systems Design and Implementation. 2011. p. 155–68.
Li, A., et al. “Bootstrapping accountability in the internet we have.” Proceedings of NSDI 2011: 8th USENIX Symposium on Networked Systems Design and Implementation, 2011, pp. 155–68.
Li A, Liu X, Yang X. Bootstrapping accountability in the internet we have. Proceedings of NSDI 2011: 8th USENIX Symposium on Networked Systems Design and Implementation. 2011. p. 155–168.

Published In

Proceedings of NSDI 2011: 8th USENIX Symposium on Networked Systems Design and Implementation

Publication Date

January 1, 2011

Start / End Page

155 / 168