Paper Details

The Distributed Denial of Services (DDoS)attack is a serious threat to the legitimate use of theInternet. Prevention mechanisms are thwarted by theability of attackers to forge, or spoof, the sourceaddresses in IP packets. By employing IP spoofing,attackers can evade detection and put a substantialburden on the destination network for policing attackpackets. In this paper, we propose an inter-domain packetfilter (IDPF) architecture that can mitigate the level of IPspoofing on the Internet. A key feature of our scheme isthat it does not require global routing information. IDPFsare constructed from the information implicit in BGProute updates and are deployed in network borderrouters. We establish the conditions under which theIDPF framework works correctly in that it does notdiscard packets with valid source addresses. Based onextensive simulation studies, we show that even withpartial deployment on the Internet, IDPFs can proactivelylimit the spoofing capability of attackers. In addition, theycan help localize the origin of an attack packet to a smallnumber of candidate networks.

Archana verma, Prerna Dewangan, “Controlling IP Spoofing Through Inter-Domain Packet Filters”, International Journal of Advance Engineering and Research Development (IJAERD), Vol. 4, Issue 15, pp. -, January 2017.