SAVAH: Source Address Validation with Host Identity Protocol

Explosive growth of the Internet and lack of mechanisms that validate the authenticity of a packet source produced serious security and accounting issues. In this paper, we propose validating source addresses in LAN using Host Identity Protocol (HIP) deployed in a first-hop router. Compared to alternative solutions such as CGA, our approach is suitable both for IPv4 and IPv6. We have implemented SAVAH in Wi-Fi access points and evaluated its overhead for clients and the first-hop router. Key words: Security, Authentication, LAN, HIP

• Type: Conference
• Year: 2009
• Where: MOBISEC
• Authors: Dmitriy Kuptsov, Andrei Gurtov
• Keywords: Host Identity Protocol, MOBISEC 2009, Security Privacy, Wi-Fi Access Points, first-hop Router