Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers
Yevheniya Nosyk
Based in Grenoble, France
I am a Ph.D. student at Université Grenoble Alpes (France), where I work on DNS and network security from large-scale Internet measurements point of view. More
• 6 min read
Source Address Validation (SAV) is the best current practice (BCP 38/RFC 2827) aimed at filtering packets based on source IP addresses at the network edge. In this article, we show how to identify networks that do not deploy SAV for incoming traffic.