Abstract

Many desirable network security features require new functionality in routers. Using programmable routers is an attractive approach to testing such security functionality and may serve as an easy path to deploying it. This paper describes an Intel IXP implementation of a protocol designed to help combat IP source address spoofing. It describes the problem of IP spoofing, presents a protocol that helps handle spoofing, and discusses why the Intel IXP 1200 router is an attractive platform for developing the protocol. The paper also presents the design of the IXP implementation and gives performance results that confirm the suitability of the IXP for this task.

Metadata

publication

Western Network Processors Conference, 2002

year

2002

publication date

2002/10

authors

Michael Burns, Gregory Prier, Jelena Mirkovic, Peter Reiher

link

https://lasr.cs.ucla.edu/ficus-members/reiher/papers/npc_paper.pdf

resource_link

https://lasr.cs.ucla.edu/ficus-members/reiher/papers/npc_paper.pdf

journal

Western Network Processors Conference