Skip to Main content Skip to Navigation
New interface
Conference papers

Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers

Abstract : This paper reports on the first Internet-wide active measurement study to enumerate networks not filtering incoming packets based on their source address. Our method identifies closed and open DNS resolvers handling requests from the outside of the network with the source address in the prefix of the tested network. The study gives the most complete picture of the inbound Source Address Validation deployment at network providers: 32,673 IPv4 ASes and 197,641 IPv4 BGP prefixes are vulnerable to spoofing of inbound traffic.
Document type :
Conference papers
Complete list of metadata

Cited literature [19 references]  Display  Hide  Download

https://hal.archives-ouvertes.fr/hal-02894078
Contributor : Yevheniya Nosyk Connect in order to contact the contributor
Submitted on : Wednesday, July 8, 2020 - 5:17:26 PM
Last modification on : Wednesday, July 6, 2022 - 4:16:20 AM
Long-term archiving on: : Monday, November 30, 2020 - 3:54:06 PM

File

SAV_ANRW_2020_extended_abstrac...
Files produced by the author(s)

Identifiers

Citation

Maciej Korczyński, Yevheniya Nosyk, Qasim Lone, Marcin Skwarek, Baptiste Jonglez, et al.. Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers. ANRW 2020 - Applied Networking Research Workshop, Jul 2020, Madrid, Spain. pp.9-11, ⟨10.1145/3404868.3406668⟩. ⟨hal-02894078⟩

Share

Metrics

Record views

56

Files downloads

153