SAVE: source address validity enforcement protocol

By Jun Yu Li, Jelena Mirkovic, Mengqiu Wang, Peter L. Reiher, Lixia Zhang. Proceedings.Twenty-First Annual Joint Conference of the IEEE Computer and Communications Societies, 2002

314 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Electrical and Electronic Engineering, Hardware and Architecture

View Paper: https://www.semanticscholar.org/paper/6b56cb635731e8dee4294586554ea0e81d650d7c

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

1. Kang G. Shin
2. Haining Wang
3. Danlu Zhang
4. Mauro Conti
5. Peter L. Reiher
6. Jelena Mirkovic
7. Nicola Dragoni
8. Viktor Lesyk

In Electrical and Electronic Engineering

1. Mauro Conti
2. Kang G. Shin
3. Peter L. Reiher
4. F. Yu
5. Jelena Mirkovic
6. Nicola Dragoni
7. Haining Wang

In Hardware and Architecture

1. Kang G. Shin
2. Peter L. Reiher
3. Jelena Mirkovic
4. Danlu Zhang
5. Cheng Jin
6. Gregory Prier
7. Haining Wang

Citations in the corpus

• A taxonomy of DDoS attack and DDoS defense mechanisms (2004, background): “The hardcoded attack speci(cid:12)cation suggests a single-purpose use of the DDoS network, or the in(cid:13)exible nature of the system.”
• Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges (2016, background): “Some examples of source-based mechanisms include ingress/egress filtering, which filters packets with spoofed IP addresses at the source’s edge routers based on the valid IP address range internal to the network [55], and Source Address Validity Enforcement (SAVE) Protocol [56].”
• A Survey of Man In The Middle Attacks (2016, background): “Source Address Validation Enforcement (SAVE) [124] is a new protocol for networks, which propagates valid network prefixes along the same paths that data packets will follow.”
• Change-point monitoring for the detection of DoS attacks (2004, methodology): “The router-based mitigation systems include Distributed Packet Filtering (DPF) [40], Ingress Filtering [14], Pushback [25], [35], Rate Throttling [61], and SAVE [33].”
• Attacking DDoS at the source (2002, background): “Several filtering mechanisms have been proposed to prevent spoofing source addresses in IP packets ([7], [13], [16]).”
• Hop-count filtering: an effective defense against spoofed DDoS traffic (2003, background): “…have posed a Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for pro.t or commercial advantage and that copies bear this notice and the full citation on the .rst page.”