Research Commons
      • Browse 
        • Communities & Collections
        • Titles
        • Authors
        • By Issue Date
        • Subjects
        • Types
        • Series
      • Help 
        • About
        • Collection Policy
        • OA Mandate Guidelines
        • Guidelines FAQ
        • Contact Us
      • My Account 
        • Sign In
        • Register
      View Item 
      •   Research Commons
      • University of Waikato Research
      • Computing and Mathematical Sciences
      • Computing and Mathematical Sciences Papers
      • View Item
      •   Research Commons
      • University of Waikato Research
      • Computing and Mathematical Sciences
      • Computing and Mathematical Sciences Papers
      • View Item
      JavaScript is disabled for your browser. Some features of this site may not work without it.

      Network hygiene, incentives, and regulation: Deployment of source address validation in the internet

      Luckie, Matthew John; Beverly, Robert; Koga, Ryan; Keys, Ken; Kroll, Joshua A.; claffy, kc
      Thumbnail
      Files
      ccs-spoofer.pdf
      Accepted version, 850.4Kb
      DOI
       10.1145/3319535.3354232
      Find in your library  
      Citation
      Export citation
      Luckie, M. J., Beverly, R., Koga, R., Keys, K., Kroll, J. A., & claffy, kc. (2019). Network hygiene, incentives, and regulation: Deployment of source address validation in the internet. In Proceedings of 2019 ACM SIGSAC Conference on Computer and Communications Security (CCS ’19) (pp. 465–480). New York, NY, USA: ACM Press. https://doi.org/10.1145/3319535.3354232
      Permanent Research Commons link: https://hdl.handle.net/10289/13176
      Abstract
      The Spoofer project has collected data on the deployment and characteristics of IP source address validation on the Internet since 2005. Data from the project comes from participants who install an active probing client that runs in the background. The client automatically runs tests both periodically and when it detects a new network attachment point. We analyze the rich dataset of Spoofer tests in multiple dimensions: across time, networks, autonomous systems, countries, and by Internet protocol version. In our data for the year ending August 2019, at least a quarter of tested ASes did not filter packets with spoofed source addresses leaving their networks. We show that routers performing Network Address Translation do not always filter spoofed packets, as 6.4% of IPv4/24 tested in the year ending August 2019 did not filter. Worse, at least two thirds of tested ASes did not filter packets entering their networks with source addresses claiming to be from within their network that arrived from outside their network. We explore several approaches to encouraging remediation and the challenges of evaluating their impact. While we have been able to remediate 352 IPv4/24, we have found an order of magnitude more IPv4/24 that remains unremediated, despite myriad remediation strategies, with 21% unremediated for more than six months. Our analysis provides the most complete and confident picture of the Internet's susceptibility to date of this long-standing vulnerability. Although there is no simple solution to address the remaining long-tail of unremediated networks, we conclude with a discussion of possible non-technical interventions, and demonstrate how the platform can support evaluation of the impact of such interventions over time.
      Date
      2019
      Type
      Conference Contribution
      Publisher
      ACM Press
      Rights
      © 2019 Association for Computing Machinery. This is the author's accepted version.
      Collections
      • Computing and Mathematical Sciences Papers [1455]
      Show full item record  

      Usage

      Downloads, last 12 months
      261
       
       
       

      Usage Statistics

      For this itemFor all of Research Commons

      The University of Waikato - Te Whare Wānanga o WaikatoFeedback and RequestsCopyright and Legal Statement