Network traffic regulation including consistency based detection and filtering of packets with spoof source addresses

摘要: A director is provided to receive source address instances of packets routed through routing devices a network. The determines whether any the reported are be deemed as spoof instances. further where filtering actions deployed filter out having certain addresses makes its determinations based at least in part on selected one number consistency measures. measures may include but not limited spatial consistency, destination migration and temporary consistency. evaluated using spatial, range, timing S/D/M/T distribution profiles addresses. In some embodiments, view reference profiles, which an exemplary profile typical non-spoof or historical address.