Source address validation (SAV) is a standard formalized in RFC 2827 aimed at discarding packets with spoofed source IP addresses. The absence of SAV has been known as a root cause of reflection distributed denial-of-service (DDoS) attacks. Outbound SAV (oSAV): filtering applied at the network edge to traffic coming from inside the customer network to the outside. Inbound SAV (iSAV): filtering applied at the network edge to traffic coming from the outside to the customer network.
Cite
@article{arxiv.2301.09952,
title = {Source Address Validation},
author = {Maciej Korczyński and Yevheniya Nosyk},
journal= {arXiv preprint arXiv:2301.09952},
year = {2023}
}
Comments
arXiv admin note: substantial text overlap with arXiv:2006.05277, arXiv:2002.00441