CERIAS Security Seminar Archive - Spoofing-resistant Packet Routing for the Internet"

Minaxi Gupta · Indiana University

Mar 29, 2006

Video Icon MP4 Video (215.4MB)   Flash Icon Flash Video   RealMedia Icon RealVideo

Abstract

The forgery of source IP addresses, called IP spoofing, is commonly exploited to launch damaging denial-of-service (DoS) attacks in the Internet. Currently proposed spoofing prevention approaches either focus on protecting only the target of such attacks and not the routing fabric used to forward spoofed packets, or fail under commonly occurring situations like path asymmetry. We will presents a hop-wise packet marking approach that equips the routers to drop spoofed packets close to their origination. Our approach has utmost concern for immediate deployability and simulations show that it dramatically reduces the amount of spoofing possible even under partial deployment.

About the Speaker

Minaxi Gupta is an Assistant Professor in the department of Computer Science at Indiana University (Bloomington, IN). Her research interests are in Computer Networks and Security, particularly in the performance aspects that fall in the intersection of these areas. Minaxi received a Ph.D. in Computer Science from Georgia Tech in 2004. She also holds an M.S. in Computer Science from Georgia Tech, and an M.Sc. in Physics from the Indian Institute of Technology Mumbai.