SEC: Secure, Efficient, and Compatible Source Address Validation with Packet Tags

Yang, Xinyu; Cao, Jiahao; Xu, Mingwei

doi:10.1109/ipccc50635.2020.9391554

Cited by 3 publications

(5 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A more general view of attack mitigation that includes several DDoS attacks have been presented in [104], [105], [106]. Considering the source of traffic, a proactive approach of source address validation has been considered in [107], while the study in [108], [109], [110] detects and drops spoofed traffic. Some specific cases have also been considered.…”

Section: A Ddos Attack Mitigationmentioning

confidence: 99%

“…3) Security of Source of the Traffic: The studies in [107], [108], [109], [110] consider the security for the source of the traffic. While [107] advocates a proactive strategy for source address validation, the studies in [108], [109], [110] detect and drop spoofed traffic in a reactive manner.…”

Section: A Ddos Attack Mitigationmentioning

confidence: 99%

“…Tag-based solutions for source address validation, have some drawbacks including insecure key negotiation, heavy encryption algorithms with computational overheads for routers, and using non-standard headers. To overcome these problems, Yang et al [107] employ a secure key negotiation mechanism that can be implemented in programmable routers. The proposed method combines Elliptic Curve Diffie-Hellman Ephemeral key agreement and resource public key infrastructure to enable secure key negotiation and defeat Manin-the-Middle attacks.…”

Section: A Ddos Attack Mitigationmentioning

confidence: 99%

“…AR-DDoS attack mitigation has been considered in [103]. Considering the security of the source of traffic, the study in [107] offload tag generation to the programmable routers for source address validation, while the studies in [108], [109], [110] filter spoofed traffic in the network element e.g., by implementing Hop Count Filtering. A more general view of attack mitigation that includes several DDoS attacks have been presented in [104], [105], [106].…”

Section: Summary Comparisons Insights and Lessons Learnedmentioning

confidence: 99%

“…• Bandwidth Consumption: Fully in-network security methods which do not require traffic transmission to the scrubbing servers or (SDN) controller, will save bandwidth in comparison with controller/server based methods. For a source address validation application, the experimental results in [107] show that in-network filtering of the spoofed packets can save the bandwidth up to 200 kbps. The co-design approaches can consume higher bandwidth than fully-in-network security schemes due to overhead of communication between server/controller and network element.…”

Section: Bandwidth Consumption Lowermentioning

confidence: 99%

See 4 more Smart Citations

A Survey on In-Network Computing: Programmable Data Plane and Technology Specific Applications

Kianpisheh

Taleb

2023

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

In comparison with cloud computing, edge computing offers processing at locations closer to end devices and reduces the user experienced latency. The new recent paradigm of innetwork computing employs programmable network elements to compute on the path and prior to traffic reaching the edge or cloud servers. It advances common edge/cloud server based computing through proposing line rate processing capabilities at closer locations to the end devices. This paper discusses use cases, enabler technologies and protocols for in-network computing. According to our study, considering programmable data plane as an enabler technology, potential in-network computing applications are in-network analytics, in-network caching, innetwork security, and in-network coordination. There are also technology specific applications of in-network computing in the scopes of cloud computing, edge computing, 5G/6G, and NFV. In this survey, the state of the art, in the framework of the proposed categorization, is reviewed. Furthermore, comparisons are provided in terms of a set of proposed criteria which assess the methods from the aspects of methodology, main results, as well as application-specific criteria. Finally, we discuss lessons learned and highlight some potential research directions.

show abstract