Abstract:The current Internet is based on the destination address forwarding in which the source address remains unverified.However,one of the root causes of Internet security problems is the untrustworthy source address.As the Internet plays an increasingly important role in political and economic fields,the security of the Inter-domain Internet becomes more crucial.For instance,the US Department of Homeland Security (DHS) has included the Inter-domain routing security in the national strategy of US information security.In recent years,innovation and evolution of the Internet are significantly undermined by the IP spoofing based distributed denial of service attacks,most of which are Inter-domain and transnational.Therefore,the Inter-domain source address validation becomes extremely important for Internet security.Although there are many techniques proposed in the relevant fields,none of them are appropriate for large-scale deployment.This paper reviews the existing research and standard progress of Inter-domain source address validation technology.First,the reasons and consequences of the lack of source address security are analyzed,and the significance of source address validation is illustrated by examining the progress of the technical standardization.Next,the advantages and disadvantages of various existing important source address validation methods are summarized.Then,the difficulties and challenges faced by the current Inter-domain source address validation technology are discussed.Finally,the prospective research directions and design principles are proposed as a reference for potential future works.

A Multi-fence Countermeasure Based Inter-domain Source Address Validation Method

Toward Practical Inter-Domain Source Address Validation

Towards a Cooperative Mechanism Based Distributed Source Address Filtering

SafeZone: A Hierarchical Inter-Domain Authenticated Source Address Validation Solution

Revisiting Inter-As IP Spoofing Let the Protection Drive Source Address Validation.

A Deep ConvNet-Based Countermeasure to Mitigate Link Flooding Attacks Using Software-Defined Networks

Review of Internet Inter-Domain IP Source Address Validation Technology

A Two-Level Source Address Spoofing Prevention Based on Automatic Signature and Verification Mechanism

Source Address Validation Solution with OpenFlow/NOX Architecture

MASK:An Efficient Mechanism to Extend Inter-Domain IP Spoofing Preventions

Internet Source Address Verification Method Based on Synchronization and Dynamic Filtering in Address Domain

SAVT: A Practical Scheme for Source Address Validation and Traceback in Campus Network

The Automatic Peer-To-Peer Signature For Source Address Validation

SAVSH: IP Source Address Validation for SDN Hybrid Networks

Toward Incentivizing Anti-Spoofing Deployment

An Authentication Based Source Address Spoofing Prevention Method Deployed in IPv6 Edge Network

Address Protection-as-a-Service An inter-AS Framework for IP Spoofing Resilience

Preventing IP Source Address Spoofing: A Two-Level, State Machine-Based Method

Source Address Validation: Architecture And Protocol Design

Investigating the efficiency of fine granularity source address validation in IPv6 networks

SEC: Secure, Efficient, and Compatible Source Address Validation with Packet Tags