Practical Address Validation for the Internet

这项提议旨在制定一个在互联网上进行源地址验证的一般框架，并调查实现源地址验证部署的问题。这项工作的结果将有助于阻止恶意攻击，如拒绝服务攻击。这项工作包括对当前网络路由协议的增强，以提供信源验证所需的信息，创建信源验证检查的原型实现，并将其部署在凯恩试验床上。通过实际实施，将调查新协议的性能，包括源地址验证在仅部分部署时如何有效地支持缺陷和攻击的诊断。

This proposal is aimed at developing a general framework for source address validation across the Internet and investigating issues in realizing the source validation deployment. Result of this work will help in stopping malicious attacks such as denial of service' attack. The work includes enhancements to the current network routing protocols to provide necessary information for source validation, creating a prototype implementation of the source validation checking and deploy it on the CAIRN testbed. Through real implementation the performance of the new protocols will be investigated including how effectively source address validation supports diagnosis of flaws and attacks when it is only partially deployed.