pSAV: A Practical and Decentralized Inter-AS Source Address Validation
pSAV:실 용적 인 분산 식 내부 AS 소스 주소 검증 방법
pSAV: un método práctico de verificación de direcciones de fuentes internas distribuidas
pSAV: une méthode pratique et décentralisée de vérification interne des adresses des sources
pSAV: практичная децентрализованная внутренняя система проверки адресов AS
Jiamin Cao ¹, Ying Liu 刘莹 ¹, Mingxing Liu ¹, Lin He ¹, Yihao Jia ², Fei Yang ²
¹ Institute for Network Sciences and Cyberspace, Tsinghua University
Beijing National Research Center for Information Science and Technology (BNRist)
清华大学网络科学与网络空间研究所 北京信息科学与技术国家研究中心
² Huawei Technologies
2021 IEEE/ACM 29th International Symposium on Quality of Service (IWQOS), 26 August 2021

Source IP address spoofing has been a major vulnerability of the Internet for many years. Although much work has been done to study the problem extensively, spoofing continues to occur frequently and has led to many serious network attacks. Inter-AS source address validation (SAV) is considered an important defense method for AS to filter spoofed packets.

However, existing work has been unable to drive inter-AS SAV deployment into practice due to the lack of deployment incentives and trust foundation.In this paper, we propose a practical and decentralized inter-AS SAV service framework, pSAV, to promote inter-AS SAV deployment. pSAV increases deployment incentives by treating SAV as a payable service and dividing the participant ASes into service subscribers, providers, and auditors. On the control plane, pSAV leverages blockchain as a trust foundation to provide service subscriptions and audits with automatic incentive allocation. On the data plane, pSAV leverages P4-programmable switches to provide flexible and high-performance SAV services.

We prototype the pSAV control plane based on Hyperledger Fabric and implement various SAV techniques on Barefoot Tofino switches. The evaluation results show that (1) on the control plane, pSAV blockchain can provide high-performance service transactions (hundreds of transactions per second with second latency), and (2) on the data plane, pSAV can provide various high-throughput (hundreds of Gbps) SAV services using only one programmable switch.
2021 IEEE/ACM 29th International Symposium on Quality of Service (IWQOS)_1
2021 IEEE/ACM 29th International Symposium on Quality of Service (IWQOS)_2
2021 IEEE/ACM 29th International Symposium on Quality of Service (IWQOS)_3
Reviews and Discussions
An overview on the principle of inkjet printing technique and its application in micro-display for augmented/virtual realities
Nonlinear optics with structured light
Femtosecond laser-induced periodic structures: mechanisms, techniques, and applications
Giant and light modifiable third-order optical nonlinearity in a free-standing h-BN film
New approach for the digital reconstruction of complex mine faults and its application in mining
p62/SQSTM1 Participates in the Innate Immune Response of Macrophages Against Candida albicans Infection
Configurable topological beam splitting via antichiral gyromagnetic photonic crystal
Single-molecule optoelectronic devices: physical mechanism and beyond
Functional nonlinear optical nanoparticles synthesized by laser ablation
The m6A methylation regulates gonadal sex differentiation in chicken embryo
A new species in the genus Synanthedon (Lepidoptera: Sesiidae) from China
A review on the forward osmosis applications and fouling control strategies for wastewater treatment

Previous Article                                Next Article
Copyright © Hot Paper