The spoofer project: inferring the extent of source address filtering on the internet

摘要: Forging, or "spoofing," the source addresses of IP packets provides malicious parties with anonymity and novel attack vectors. Spoofing-based attacks complicate network operator's defense techniques; tracing spoofing remains a difficult largely manual process. More sophisticated next generation distributed denial service (DDoS) may test filtering policies adaptively attempt to forge addresses. To understand current state filtering, this paper presents an Internet-wide active measurement project. Clients in our study send carefully crafted UDP designed infer policies. When valid is place we determine granularity by performing adjacent netblock scanning. Our results are first quantify extent nature ability spoof on Internet. We find that approximately one-quarter observed addresses, netblocks autonomous systems (AS) permit full partial spoofing. Projecting number entire Internet, approximation show reasonable, yields over 360 million 4,600 ASes from which possible. findings suggest large portion Internet vulnerable concerted employing remain serious concern.