Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers

MacIej Korczyński, Yevheniya Nosyk, Qasim Lone, Marcin Skwarek, Baptiste Jonglez, Andrzej Duda

Research output: Chapter in Book/Conference proceedings/Edited volumeConference contributionScientificpeer-review

1 Citation (Scopus)

Abstract

This paper reports on the first Internet-wide active measurement study to enumerate networks not filtering incoming packets based on their source address. Our method identifies closed and open DNS resolvers handling requests from the outside of the network with the source address in the prefix of the tested network. The study gives the most complete picture of the inbound Source Address Validation deployment at network providers: 32,673 IPv4 ASes and 197,641 IPv4 BGP prefixes are vulnerable to spoofing of inbound traffic.

Original languageEnglish
Title of host publicationANRW 2020 - Proceedings of the 2020 Applied Networking Research Workshop
PublisherAssociation for Computing Machinery (ACM)
Pages9-11
Number of pages3
ISBN (Electronic)9781450380393
DOIs
Publication statusPublished - 2020
Event2020 Applied Networking Research Workshop, ANRW 2020 - Meetecho, Online, Spain
Duration: 27 Jul 202030 Jul 2020

Publication series

NameANRW 2020 - Proceedings of the 2020 Applied Networking Research Workshop

Conference

Conference2020 Applied Networking Research Workshop, ANRW 2020
CountrySpain
CityMeetecho, Online
Period27/07/2030/07/20

Fingerprint

Dive into the research topics of 'Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers'. Together they form a unique fingerprint.

Cite this