LIPS: Lightweight Internet Permit System for Stopping Unwanted Packets

DMCA

LIPS: Lightweight Internet Permit System for Stopping Unwanted Packets

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Changho Choi , Yingfei Dong

BibTeX

@MISC{Choi_lips:lightweight,
    author = {Changho Choi and Yingfei Dong},
    title = {LIPS: Lightweight Internet Permit System for Stopping Unwanted Packets},
    year = {}
}

OpenURL

Abstract

Abstract. In this paper, we propose a Lightweight Internet Permit System (LIPS) that provides a lightweight, scalable packet authentication mechanism for ensuring traffic-origin accountability. LIPS is a simple extension of IP, in which each packet carries an access permit issued by its destination host or gateway, and the destination verifies the access permit to determine if a packet is accepted or dropped. We will first present the design and the prototype implementation of LIPS on Linux 2.4 kernel. We then use analysis, simulations, and experiments to show how LIPS can effectively prevent protected critical servers and links from being flooded by unwanted packets with negligible overheads. We propose LIPS as an domain-to-domain approach to stop unwanted attacks, without requiring broad changes in backbone networks as other approaches. Therefore, LIPS is incrementally deployable in a large scale on common platforms with minor software patches.

Keyphrases

unwanted packet lightweight internet permit system access permit backbone network scalable packet authentication mechanism destination host unwanted attack broad change negligible overhead minor software patch domain-to-domain approach prototype implementation large scale common platform simple extension traffic-origin accountability protected critical server

DMCA