Source IP spoofing is still an endemic challenge despite best practices documents being published more than 13 years ago that would prevent it if all ISPs abided by them. We argue that these approaches failed to gain widespread adoption due to fundamental incentive misalignment. We then propose an SDN-based solution designed to be placed at Internet exchange points by ISPs with the incentives to filter spoofed traffic. This solution doesn't replace existing routers and it runs on low-cost, high-speed OpenFlow switches with graceful failure strategies to make adoption simple.
['Kevin Benton', 'L. Jean Camp', 'Timothy Kelley', 'Martin Swany']
Filtering IP source spoofing using feasible path reverse path forwarding with SDN