TY - GEN
T1 - Source address filtering in large scale network
T2 - 2011 ACM CoNext Student Workshop, CoNEXT 2011
AU - Yang, Shu
AU - Xu, Mingwei
AU - Wang, Dan
AU - Wu, Jianping
PY - 2011/12/1
Y1 - 2011/12/1
N2 - To prevent network infrastructure from malicious traffic, such as DDoS attack and scanning, source filtering is widely used in the network. There are different ways to store the filters, e.g., a blacklist of source addresses. Among them, TCAM-based is used as the de facto, because of its wire speed performance. Unfortunately, TCAM is a scarce resource because it's limited by small capacity, high power consumption and high cost. To save storage space, some TCAM-based solutions even block part of the legitimate traffic for better aggregation. Another choice is software based solutions, which have larger storage space compared to hardware based solutions. However, they require multiple accesses for a single lookup, which causes latency.
AB - To prevent network infrastructure from malicious traffic, such as DDoS attack and scanning, source filtering is widely used in the network. There are different ways to store the filters, e.g., a blacklist of source addresses. Among them, TCAM-based is used as the de facto, because of its wire speed performance. Unfortunately, TCAM is a scarce resource because it's limited by small capacity, high power consumption and high cost. To save storage space, some TCAM-based solutions even block part of the legitimate traffic for better aggregation. Another choice is software based solutions, which have larger storage space compared to hardware based solutions. However, they require multiple accesses for a single lookup, which causes latency.
UR - http://www.scopus.com/inward/record.url?scp=84862946423&partnerID=8YFLogxK
U2 - 10.1145/2079327.2079328
DO - 10.1145/2079327.2079328
M3 - Conference article published in proceeding or book
AN - SCOPUS:84862946423
SN - 1595930361
SN - 9781595930361
T3 - Proceedings of the ACM CoNEXT Student Workshop, CoNEXT 2011
BT - Proceedings of the ACM CoNEXT Student Workshop, CoNEXT 2011
Y2 - 6 December 2011 through 6 December 2011
ER -