On the effectiveness of Martian address filtering and its extensions

Hyogon Kim; Inhye Kang

On the effectiveness of Martian address filtering and its extensions

Hyogon Kim, Inhye Kang

Department of Mechanical and Information Engineering

Korea University

Research output: Contribution to conference › Paper › peer-review

5 Scopus citations

Abstract

Martian address filtering refers to a technique that discards IP packets that have an invalid source or destination address. This paper evaluates its effectiveness (or lack thereof) under denial of service (DoS) attack or host scan, in terms of packet-level and flow-level filtering performance. In order to overcome the shortcoming of Martian address filtering, we consider two extensions: unallocated address checking and blacklisting. We demonstrate through trace-based simulation that these techniques can indeed boost filtering performance. We also analyze the performance and the possible side-effects of the extensions.

Original language	English
Pages	1348-1352
Number of pages	5
State	Published - 2003
Event	IEEE Global Telecommunications Conference GLOBECOM'03 - San Francisco, CA, United States Duration: 1 Dec 2003 → 5 Dec 2003

Conference

Conference	IEEE Global Telecommunications Conference GLOBECOM'03
Country/Territory	United States
City	San Francisco, CA
Period	1/12/03 → 5/12/03

Keywords

Denial-of-service attack
Host scan
Martian addresses
Packet filtering
Stateful inspection

Cite this

@conference{1158fdb958074ec79f94d6d79a3ae994,

title = "On the effectiveness of Martian address filtering and its extensions",

abstract = "Martian address filtering refers to a technique that discards IP packets that have an invalid source or destination address. This paper evaluates its effectiveness (or lack thereof) under denial of service (DoS) attack or host scan, in terms of packet-level and flow-level filtering performance. In order to overcome the shortcoming of Martian address filtering, we consider two extensions: unallocated address checking and blacklisting. We demonstrate through trace-based simulation that these techniques can indeed boost filtering performance. We also analyze the performance and the possible side-effects of the extensions.",

keywords = "Denial-of-service attack, Host scan, Martian addresses, Packet filtering, Stateful inspection",

author = "Hyogon Kim and Inhye Kang",

year = "2003",

language = "English",

pages = "1348--1352",

note = "IEEE Global Telecommunications Conference GLOBECOM'03 ; Conference date: 01-12-2003 Through 05-12-2003",

}

TY - CONF

T1 - On the effectiveness of Martian address filtering and its extensions

AU - Kim, Hyogon

AU - Kang, Inhye

PY - 2003

Y1 - 2003

N2 - Martian address filtering refers to a technique that discards IP packets that have an invalid source or destination address. This paper evaluates its effectiveness (or lack thereof) under denial of service (DoS) attack or host scan, in terms of packet-level and flow-level filtering performance. In order to overcome the shortcoming of Martian address filtering, we consider two extensions: unallocated address checking and blacklisting. We demonstrate through trace-based simulation that these techniques can indeed boost filtering performance. We also analyze the performance and the possible side-effects of the extensions.

AB - Martian address filtering refers to a technique that discards IP packets that have an invalid source or destination address. This paper evaluates its effectiveness (or lack thereof) under denial of service (DoS) attack or host scan, in terms of packet-level and flow-level filtering performance. In order to overcome the shortcoming of Martian address filtering, we consider two extensions: unallocated address checking and blacklisting. We demonstrate through trace-based simulation that these techniques can indeed boost filtering performance. We also analyze the performance and the possible side-effects of the extensions.

KW - Denial-of-service attack

KW - Host scan

KW - Martian addresses

KW - Packet filtering

KW - Stateful inspection

UR - http://www.scopus.com/inward/record.url?scp=0842289258&partnerID=8YFLogxK

M3 - Paper

AN - SCOPUS:0842289258

SP - 1348

EP - 1352

T2 - IEEE Global Telecommunications Conference GLOBECOM'03

Y2 - 1 December 2003 through 5 December 2003

ER -

On the effectiveness of Martian address filtering and its extensions

Abstract

Conference

Keywords

Other files and links

Fingerprint

Cite this