Sciweavers

Share
ICNP
2007
IEEE

Source Address Validation: Architecture and Protocol Design

10 years 6 months ago
Source Address Validation: Architecture and Protocol Design
The current Internet addressing architecture does not verify the source address of a packet received and forwarded. This causes serious security and accounting problems. Based on the drastically increased IPv6 address space, a "Source Address Validation Architecture" (SAVA) is proposed in this paper, which can guarantee that every packet received and forwarded holds an authenticated source IP address. The design goals of the architecture are lightweight, loose coupling, "multi-fence support" and incremental deployment. This paper discusses the details of design and implementation for the architecture, including inter-AS, intra-AS and local subnet. This architecture is deployed into the CNGI-CERNET2 infrastructure - a large-scale native IPv6 backbone network of the China Next Generation Internet project. We believe that the Source Address Validation Architecture will help the transition to a new, more secure and sustainable Internet.
Jianping Wu, Gang Ren, Xing Li
Added 03 Jun 2010
Updated 03 Jun 2010
Type Conference
Year 2007
Where ICNP
Authors Jianping Wu, Gang Ren, Xing Li
Comments (0)
books