Source Address Validation Improvement Research Articles

An efficient and reliable service customized routing mechanism based on deep learning in IPv6 network

Best-effort service model of traditional routing is gradually hard to meet the personalized demands under the rapid development of network technologies (e.g. 5G and IPv6). Therefore, service customization should be considered. In this work, a service customized routing mechanism based on deep learning in IPv6 network is proposed, which includes deep learning-based service customization module, reliability evaluation module, and routing calculation module. The first module uses neural network to learn the complex service customization function, which can quickly output win-win customized service strategies based on user demands. The second module can quantify the reliability of service routing paths, where not only the link status of IPv6 Neighbor Unreachable Detection (NUD) is considered, but also propose link performance weights to ensure the reliability of differentiated service performance. The third module uses the gray wolf optimization algorithm to calculate an optimal routing path to forward services with the customized strategies as the constraints and the maximum reliability and minimum cost as the goal. Finally, the mechanism is tested on the IPv6 Source Address Validation Improvement (SAVI) platform, which can reduce the execution time by 12.25% and improve the average routing reliability, user and ISP satisfaction by 9.0%, 40.45% and 7.4%, respectively.

The Fight against IP Spoofing Attacks: Network Ingress Filtering Versus First come, First-Served Source Address Validation Improvement (FCFS SAVI)

The Fight against IP Spoofing Attacks: Network Ingress Filtering Versus First come, First-Served Source Address Validation Improvement (FCFS SAVI)

A general framework of source address validation and traceback for IPv4/IPv6 transition scenarios

IP spoofing has nowadays become a research focus, as it has been bothering netizens since the emergence of the Internet. Though many studies have made their contributions to the prevention of IP-spoofing, the most excellent one is the SAVI (Source Address Validation Improvement) proposal advocated by IETF, since it can prevent IP-spoofing from happening by automatically binding the key properties of hosts in layer2 access subnet. Nevertheless, till now, SAVI only focuses on the IPv6 stack and simple network access scenarios. To the best of our knowledge, there is no solution even has paid attention to IPv4/IPv6 transition scenarios. Given the fact that IPv4/IPv6 transition will continue to be adopted for a long period of time, this issue is becoming increasingly urgent. However, since transition schemes are plenty and diverse, hardly can an ordinary solution satisfy all the requirements of various transition scenarios. In this paper, we present an improved general SAVI-based framework of IP source address validation and traceback for IPv4/IPv6 transition scenarios. To achieve this goal, we extract essential and mutual properties from these transition schemes, and create sub-solutions for each property. Naturally, if one transition scheme is proposed by combining some properties, the corresponding sub-solutions would be included into its IP source address validation and traceback solution. Therefore, the advantage of this framework is its capability to adapt to all the transition schemes.

The Realization of the Source Address Validation Improvement (SAVI) in IPV6 Campus Network

With the rapidly developing of Internet, the problem of network security is getting more and more serious gradually. Most of the root cause is in connection with illegal host access. The source address validation improvement (SAVI) is a technology to realize the source address validation in the access network. Illegal access of the user can be safe and effective control from the access layer by SAVI. SAVI has positive significance in the use of the ipv6 campus network.