BCP38 Deployment

2012-03-28 Thread Bingyang LIU
Hi all, I'm Bingyang Liu, a ph.d student in Tsinghua University. My thesis topic is on "source address validation". Although BCP38 was proposed more than ten years ago, IP spoofing still remains an attack vector [MIT-Spoofer] [ARBOR-Annual-Report] [Presentation on NANOG Meeting]

Re: BCP38 Deployment

2012-03-28 Thread Bingyang LIU
Actually, given the uptick in spoofing-based DoS attacks, the ease in > which such attacks can be generated, recent high profile targets of said > attacks, and the full-on money pumping freakout about anything with > "cyber-" tacked on the front, I suspect a likely outcome will

Re: BCP38 Deployment

2012-03-28 Thread Bingyang LIU
> federal level and you will have nobody but yourselves to blame. > > The choice is yours. > > -Dan > -- Bingyang Liu Network Architecture Lab, Network Center,Tsinghua Univ. Beijing, China Home Page: http://netarchlab.tsinghua.edu.cn/~liuby

Re: BCP38 Deployment

2012-03-28 Thread Bingyang LIU
> think "china", after first abstracting all the negatives associated > with policy as a property of a distributed, shared, public resource, > or "firewalls 4 (bcp defined) good". > > -e > -- Bingyang Liu Network Architecture Lab, Network Center,Tsinghua Univ. Beijing, China Home Page: http://netarchlab.tsinghua.edu.cn/~liuby

Re: BCP38 Deployment

2012-03-28 Thread Bingyang LIU
is what I believe really hurts things. > > Granted, this is along a different line than what the OP was talking > about, but in terms of answering the question of "why don't we see > ingress filtering as much as we should?", I think it's a large factor. > > -- >