Packet Passport System

Introduction

Packet Passport System is an on-going research project that provides unspoofable source identifiers inside packets in the Internet. Our observation is that if packets carried unspoofable source identifiers, it would be much easier and more effective to fight DoS attacks. For instance, with the identifiers we could precisely block DoS flooding traffic while avoiding collateral damage, i.e. not blocking normal traffic.

Publication

Xin Liu, Xiaowei Yang, David Wetherall and Thomas Anderson, Efficient and Secure Source Authentication with Packet Passports , 2nd USENIX Steps to Reduce Unwanted Traffic on the Internet workshop (SRUTI 2006), pp.7-13, San Jose, CA, 2006. bibtex pdf slides
Xin Liu, Xiaowei Yang, David Wetherall and Thomas Anderson, Unspoofable Source Identifiers without Global Trust, Student poster, ACM SIGCOMM, 2006. pdf poster