NANOG Meeting Presentation Abstract

The Spoofer Project: Inferring the Extent of Internet Source Address Filtering on the Internet
Meeting:	NANOG34
Date / Time:	2005-05-16 11:30am - 11:45am
Room:	Grand Ballroom II-III<BR>Grand Level
Presenters:	Moderators: Robert Beverly, MIT.
Abstract:	By forging or \"spoofing\" the source address of an IP packet, a malicious user or compromised host can send packets toward a victim anonymously or employ reflector attacks. This talk presents an Internet-wide active measurement spoofing project. Clients source valid, bogon and martian spoofed UDP packets to determine source address filtering policy. We infer filtering granularity by performing adjacent netblock scanning. Our results are the first to quantify the extent and nature of filtering and the ability to spoof on the Internet. Approximately 23% of the observed netblocks and autonomous systems permit spoofing or employ automated configuration methods that allow partial spoofing. Projecting this number to the entire Internet, an approximation we show is reasonable, yields over 108M spoofable addresses and 4,000 spoofable networks. Our findings suggest that a large portion of the Internet is still vulnerable to spoofing and concerted attacks remain a serious concern.
Files:	Robert Beverly Presentation(PDF) The Spoofer Project
Sponsors:	None.

Back to NANOG34 agenda.

NANOG34 Abstracts

• Show All

• Bridges, Routers, Switches, Oh My!
  Level: Introductory/Intermediate
  Speakers:
  Radia Perlman, Sun;

• Best Practices for Determining the Traffic Matrix in IP Networks
  Level: Intermediate
  Speakers:
  Thomas Telkamp, Cariden;

• Challenges in Network Security Protocols
  Level: Introductory/Intermediate
  Speakers:
  Radia Perlman, Sun;

• BGP Techniques for Service Providers
  Speakers:
  Philip Smith, Cisco Systems;

• BGP Analysis Tools
  Speakers:
  Lixia ZhangUCLA; .
  Mohit LadUCLA; .
  Dan MasseyColorado State University; .
  Manish KarirMerit Network; .
  

• BGP Analysis Tools
  Speakers:
  Lixia ZhangUCLA; .
  Mohit LadUCLA; .
  Dan MasseyColorado State University; .
  Manish KarirMerit Network; .
  

• BGP Analysis Tools
  Speakers:
  Lixia ZhangUCLA; .
  Mohit LadUCLA; .
  Dan MasseyColorado State University; .
  Manish KarirMerit Network; .
  

• BGP Analysis Tools
  Speakers:
  Lixia ZhangUCLA; .
  Mohit LadUCLA; .
  Dan MasseyColorado State University; .
  Manish KarirMerit Network; .
  

• Design Decisions and Architecture Analysis of a Global 10G Backbone (We Do it, so You Don\'t Have To)
  Speakers:
  Vijay GillAOL Time Warner; .
  

• VoIP Overview for Operators
  Speakers:
  Eugene LewNeuStar; .
  

• Securing Carrier VoIP: Session Border Control
  Speakers:
  Hadriel Kaplan, Acme Packet;

• The Spoofer Project: Inferring the Extent of Internet Source Address Filtering on the Internet
  Moderators:
  Robert BeverlyMIT; .
  

• Trust Reflection: A Distributed Approach to PGP Key Signing at Multi-Day Events
  Speakers:
  Joe AbleyISC; .
  

• Anycast Measurements Used to Highlight Routing Instabilities
  Speakers:
  Peter BootheUniversity of Oregon; .
  Randy BushIIJ; .
  

• Anycast Measurements Used to Highlight Routing Instabilities
  Speakers:
  Peter BootheUniversity of Oregon; .
  Randy BushIIJ; .
  

• DNS Anycast Stability
  Speakers:
  Daniel Karrenberg, RIPE NCC;

• Building Nameserver Clusters with Free Software
  Speakers:
  Joe AbleyISC; .
  

• Anatomy of a Leak: AS9121 (or, \"How We Learned To Start Worrying and Hate Maximum Prefix Limits\")
  Speakers:
  Alin C. PopescuRenesys Corporation; .
  Brian J. PremoreRenesys Corporation; .
  Todd UnderwoodRenesys Corporation; .
  

• Anatomy of a Leak: AS9121 (or, \"How We Learned To Start Worrying and Hate Maximum Prefix Limits\")
  Speakers:
  Alin C. PopescuRenesys Corporation; .
  Brian J. PremoreRenesys Corporation; .
  Todd UnderwoodRenesys Corporation; .
  

• Anatomy of a Leak: AS9121 (or, \"How We Learned To Start Worrying and Hate Maximum Prefix Limits\")
  Speakers:
  Alin C. PopescuRenesys Corporation; .
  Brian J. PremoreRenesys Corporation; .
  Todd UnderwoodRenesys Corporation; .
  

• Panel: XSP Security Vulnerabilities Panel
  Moderators:
  Martin HanniganVersign; .
  Panelists:
  Patrick GilmoreAkamai Technologies; .
  Aaron HughesTerremark/NOTA; .
  Chris MalayterTDS Telecom; .
  Chris MorrowUUNET; .
  Richard SteenbergennLayer Communications; .
  

• Panel: XSP Security Vulnerabilities Panel
  Moderators:
  Martin HanniganVersign; .
  Panelists:
  Patrick GilmoreAkamai Technologies; .
  Aaron HughesTerremark/NOTA; .
  Chris MalayterTDS Telecom; .
  Chris MorrowUUNET; .
  Richard SteenbergennLayer Communications; .
  

• Panel: XSP Security Vulnerabilities Panel
  Moderators:
  Martin HanniganVersign; .
  Panelists:
  Patrick GilmoreAkamai Technologies; .
  Aaron HughesTerremark/NOTA; .
  Chris MalayterTDS Telecom; .
  Chris MorrowUUNET; .
  Richard SteenbergennLayer Communications; .
  

• Panel: XSP Security Vulnerabilities Panel
  Moderators:
  Martin HanniganVersign; .
  Panelists:
  Patrick GilmoreAkamai Technologies; .
  Aaron HughesTerremark/NOTA; .
  Chris MalayterTDS Telecom; .
  Chris MorrowUUNET; .
  Richard SteenbergennLayer Communications; .
  

• Panel: XSP Security Vulnerabilities Panel
  Moderators:
  Martin HanniganVersign; .
  Panelists:
  Patrick GilmoreAkamai Technologies; .
  Aaron HughesTerremark/NOTA; .
  Chris MalayterTDS Telecom; .
  Chris MorrowUUNET; .
  Richard SteenbergennLayer Communications; .
  

• Panel: XSP Security Vulnerabilities Panel
  Moderators:
  Martin HanniganVersign; .
  Panelists:
  Patrick GilmoreAkamai Technologies; .
  Aaron HughesTerremark/NOTA; .
  Chris MalayterTDS Telecom; .
  Chris MorrowUUNET; .
  Richard SteenbergennLayer Communications; .
  

• Peering BOF IX
  Moderators:
  Bill NortonEquinix; .
  

• INOC-DBA BOF with INOC-DBA Operators
  Moderators:
  Gaurab Raj Upadhaya, PCH;

• ISP Security and NSP-SEC BOF IX
  Moderators:
  Chris MorrowUUNET; .
  

• IPv6 - Evolutionary Issues and Challenges
  Speakers:
  Udo Steinegger, Cable & Wireless;

• Inter-AS Traffic Engineering Case Studies as Requirements for IPv6 Multihoming Solutions
  Speakers:
  Jason Schiller, UUNET;

• Moonv6 Update
  Speakers:
  Scott GrossMCI; .
  

• Internet Mini-Cores: Local Communications in the Internet\'s \"Spur\" Regions
  Speakers:
  Steve Gibbard, PCH;

• Network-Wide Inter-Domain Routing Policies: Design and Realization
  Speakers:
  Olaf MaennelTechnical University Munich; .
  Anja Feldmann, Technical University Munich; Christian ReiserTechnical University Munich; .
  Ruediger VolkDeutsche Telekom; .
  Hagen BoehmDeutsche Telekom; .
  

• Network-Wide Inter-Domain Routing Policies: Design and Realization
  Speakers:
  Olaf MaennelTechnical University Munich; .
  Anja Feldmann, Technical University Munich; Christian ReiserTechnical University Munich; .
  Ruediger VolkDeutsche Telekom; .
  Hagen BoehmDeutsche Telekom; .
  

• Network-Wide Inter-Domain Routing Policies: Design and Realization
  Speakers:
  Olaf MaennelTechnical University Munich; .
  Anja Feldmann, Technical University Munich; Christian ReiserTechnical University Munich; .
  Ruediger VolkDeutsche Telekom; .
  Hagen BoehmDeutsche Telekom; .
  

• Network-Wide Inter-Domain Routing Policies: Design and Realization
  Speakers:
  Olaf MaennelTechnical University Munich; .
  Anja Feldmann, Technical University Munich; Christian ReiserTechnical University Munich; .
  Ruediger VolkDeutsche Telekom; .
  Hagen BoehmDeutsche Telekom; .
  

• Network-Wide Inter-Domain Routing Policies: Design and Realization
  Speakers:
  Olaf MaennelTechnical University Munich; .
  Anja Feldmann, Technical University Munich; Christian ReiserTechnical University Munich; .
  Ruediger VolkDeutsche Telekom; .
  Hagen BoehmDeutsche Telekom; .
  

• Beyond 10 Gigabit Ethernet
  Speakers:
  Subramanian Krishnamurthy, Force10;

• Community Meeting III
  Speakers:
  Betty BurkeMerit Network; .
  Marcia MardisMerit Network; .
  Steve FeldmanCNET; .
  Martin HanniganVeriSign; .
  

• Community Meeting III
  Speakers:
  Betty BurkeMerit Network; .
  Marcia MardisMerit Network; .
  Steve FeldmanCNET; .
  Martin HanniganVeriSign; .
  

• Community Meeting III
  Speakers:
  Betty BurkeMerit Network; .
  Marcia MardisMerit Network; .
  Steve FeldmanCNET; .
  Martin HanniganVeriSign; .
  

• Community Meeting III
  Speakers:
  Betty BurkeMerit Network; .
  Marcia MardisMerit Network; .
  Steve FeldmanCNET; .
  Martin HanniganVeriSign; .