Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing

摘要: Recent occurrences of various Denial Service (DoS) attacks which have employed forged source addresses proven to be a troublesome issue for Internet Providers and the community overall. This paper discusses simple, effective, straightforward method using ingress traffic filtering prohibit DoS use IP propagated from 'behind' an Provider's (ISP) aggregation point.