pSAV: A Practical and Decentralized Inter-AS Source Address Validation
pSAV:실 용적 인 분산 식 내부 AS 소스 주소 검증 방법
pSAV: un método práctico de verificación de direcciones de fuentes internas distribuidas
pSAV: une méthode pratique et décentralisée de vérification interne des adresses des sources
pSAV: практичная децентрализованная внутренняя система проверки адресов AS
Jiamin Cao ¹, Ying Liu 刘莹 ¹, Mingxing Liu ¹, Lin He ¹, Yihao Jia ², Fei Yang ²
¹ Institute for Network Sciences and Cyberspace, Tsinghua University
Beijing National Research Center for Information Science and Technology (BNRist)
清华大学网络科学与网络空间研究所 北京信息科学与技术国家研究中心
² Huawei Technologies
2021 IEEE/ACM 29th International Symposium on Quality of Service (IWQOS), 26 August 2021

Source IP address spoofing has been a major vulnerability of the Internet for many years. Although much work has been done to study the problem extensively, spoofing continues to occur frequently and has led to many serious network attacks. Inter-AS source address validation (SAV) is considered an important defense method for AS to filter spoofed packets.

However, existing work has been unable to drive inter-AS SAV deployment into practice due to the lack of deployment incentives and trust foundation.In this paper, we propose a practical and decentralized inter-AS SAV service framework, pSAV, to promote inter-AS SAV deployment. pSAV increases deployment incentives by treating SAV as a payable service and dividing the participant ASes into service subscribers, providers, and auditors. On the control plane, pSAV leverages blockchain as a trust foundation to provide service subscriptions and audits with automatic incentive allocation. On the data plane, pSAV leverages P4-programmable switches to provide flexible and high-performance SAV services.

We prototype the pSAV control plane based on Hyperledger Fabric and implement various SAV techniques on Barefoot Tofino switches. The evaluation results show that (1) on the control plane, pSAV blockchain can provide high-performance service transactions (hundreds of transactions per second with second latency), and (2) on the data plane, pSAV can provide various high-throughput (hundreds of Gbps) SAV services using only one programmable switch.
2021 IEEE/ACM 29th International Symposium on Quality of Service (IWQOS)_1
2021 IEEE/ACM 29th International Symposium on Quality of Service (IWQOS)_2
2021 IEEE/ACM 29th International Symposium on Quality of Service (IWQOS)_3
Reviews and Discussions
An Annotated List of Lizards (Sauria: Squamata) Recorded from the People’s Republic of China
Mapping non-laminar proton acceleration in laser-driven target normal sheath field
{332}<113>Twinning transfer behavior and its effect on the twin shape in a beta-type Ti-23.1Nb-2.0Zr-1.0O alloy
Transformation of agriculture on the Loess Plateau of China toward green development
Code design and latency analysis of distributed matrix multiplication with straggling servers in fading channels
Perspectives and challenges for lead-free energy-storage multilayer ceramic capacitors
On the Asymptotic Stability of Wave Equations Coupled by Velocities of Anti-symmetric Type
Effects on the emission discrepancy between two-dimensional Sn-based and Pb-based perovskites
Hydrogels with Dynamically Controllable Mechanics and Biochemistry for 3D Cell Culture Platforms
Feature and Tendency of Technology Transfer in Z-Park Patent Cooperation Network: From the Perspective of Global Optimal Path
Mechanical Design and Dynamic Compliance Control of Lightweight Manipulator
Scalping or Line-sitting: The Role of Speculators

Previous Article                                Next Article
Copyright © Hot Paper