FaaS: Filtering IP spoofing traffic as a service

IP spooling weakens network security and accountability. Although a lot of techniques have been proposed to prevent IP spoofing, most of them are not implemented by device vendors, and the only available anti-spoofing tool in practice is ingress filtering |3|. However, ISPs do not have incentives to deploy ingress filtering as it only prohibits a deployer from sending spoofing traffic, but it hardly protects the deployer from receiving spoofing traffic. Recent research shows that the deployment of ingress filtering hasn't been improved in four years, and the Internet is still vulnerable to IP spoofing [2J. Copyright 2012 ACM.

Duke Scholars

Author Xiaowei Yang Computer Science