Jasper Eumann: IP Spoofing Detection in Inter-Domain Traffic
A Reproducibility Study of "IP Spoofing Detection in Inter-Domain Traffic''
- https://inet.haw-hamburg.de/events/inet-seminar/jasper-eumann-ip-spoofing-detection-in-inter-domain-traffic
- Jasper Eumann: IP Spoofing Detection in Inter-Domain Traffic
- 2019-10-09T16:00:00+02:00
- 2019-10-09T17:00:00+02:00
- A Reproducibility Study of "IP Spoofing Detection in Inter-Domain Traffic''
Oct 09, 2019 from 04:00 PM to 05:00 PM (Europe/Berlin / UTC200)
IP spoofing enables reflection and amplification attacks, which cause major threats to the current Internet infrastructure. Detecting IP packets with incorrect source addresses would help to improve the situation. This is easy at the attacker's network, but very challenging at Internet eXchange Points (IXPs) or in transit networks.
In this reproducibility study, we revisit the paper Detection, Classification, and Analysis of Inter-Domain Traffic with Spoofed Source IP Addresses published at ACM IMC 2017.
Using data from a different IXP and from a different time, we found that the manual component of the methodology (i) represents the major challenge in terms of repeatability, and has (ii) a significant effect on the results; this highlights challenges in deploying approaches based on current methods in an automated fashion.