NETSEC

SAVE: Internet Source Address Validity Enforcement

IP source address spoofing has plagued the Internet for many years. Attackers spoof source addresses to mount attacks and redirect blame. We have surveyed the state of IP spoofing defense, and designed and evaluated a solution that focuses on addressing a fundamental deficiency of the Internet since day one -- routers know where to forward a packet, but have no knowledge where a packet should come from.

Our publications include the following:

• Toby Ehrenkranz. Ensuring A Valid Source And Destination For Internet Traffic, Ph.D. Thesis, June 2012.
• Toby Ehrenkranz, Jun Li, and Patrick McDaniel, "Realizing a source authentic Internet," in 6th International ICST Conference on Security and Privacy in Communication Networks (SecureComm), September 2010, p. 18 pages. Paper, Slides.
• Toby Ehrenkranz and Jun Li, "On the state of IP spoofing defense," ACM Transactions on Internet Technology, vol. 9, no. 2, May 2009.
• Jun Li, Jelena Mirkovic, Toby Ehrenkranz, Mengqiu Wang, Peter Reiher, and Lixia Zhang, "Learning the valid incoming direction of IP packets," Computer Networks, vol. 52, no. 2, pp. 399-417, February 2008.
• Jun Li, Jelena Mirkovic, Mengqiu Wang, Peter L. Reiher, and Lixia Zhang, "SAVE: Source address validity enforcement protocol," in IEEE INFOCOM, New York, June 2002, pp. 1557-66, acceptance rate 20.5%.
• Toby Ehrenkranz and Jun Li, "An incrementally deployable protocol for learning the valid incoming direction of IP packets," Tech. Rep. CIS-TR-2007-05, University of Oregon, March 2007.
• Jelena Mirkovic, Zhiguo Xu, Jun Li, Mattew Schneider, Peter Reiher, and Lixia Zhang, "iSAVE: Incrementally deployable source address validation," Tech. Rep. UCLA-CSD-020030, UCLA Computer Science Department, 2004.
• Jun Li, Jelena Mirkovic, Mengqiu Wang, Peter L. Reiher, and Lixia Zhang, "SAVE: Source address validity enforcement protocol," Tech. Rep. UCLA-CSD-010004, UCLA Computer Science Department, 2001.
• Toby Ehrenkranz and Jun Li, "ID-SAVE: Incrementally deployable source address validity enforcement," in USENIX Security Symposium, August 2006, work-in-progress.
• Jun Li, Jelena Mirkovic, Mengqiu Wang, Peter Reiher, and Lixia Zhang, "SAVE: Source address validity enforcement protocol," in USENIX Security Symposium, Washington, D.C., August 2001, work-in-progress.