On the effectiveness of Martian address filtering and its extensions

Hyogon Kim, Inhye Kang

Research output: Contribution to conferencePaper

5 Citations (Scopus)

Abstract

Martian address filtering refers to a technique that discards IP packets that have an invalid source or destination address. This paper evaluates its effectiveness (or lack thereof) under denial of service (DoS) attack or host scan, in terms of packet-level and flow-level filtering performance. In order to overcome the shortcoming of Martian address filtering, we consider two extensions: unallocated address checking and blacklisting. We demonstrate through trace-based simulation that these techniques can indeed boost filtering performance. We also analyze the performance and the possible side-effects of the extensions.

Original languageEnglish
Pages1348-1352
Number of pages5
Publication statusPublished - 2003
EventIEEE Global Telecommunications Conference GLOBECOM'03 - San Francisco, CA, United States
Duration: 2003 Dec 12003 Dec 5

Other

OtherIEEE Global Telecommunications Conference GLOBECOM'03
CountryUnited States
CitySan Francisco, CA
Period03/12/103/12/5

Keywords

  • Denial-of-service attack
  • Host scan
  • Martian addresses
  • Packet filtering
  • Stateful inspection

ASJC Scopus subject areas

  • Electrical and Electronic Engineering
  • Global and Planetary Change

Fingerprint Dive into the research topics of 'On the effectiveness of Martian address filtering and its extensions'. Together they form a unique fingerprint.

  • Cite this

    Kim, H., & Kang, I. (2003). On the effectiveness of Martian address filtering and its extensions. 1348-1352. Paper presented at IEEE Global Telecommunications Conference GLOBECOM'03, San Francisco, CA, United States.