A World-View of IP Spoofing in L4 Volumetric DoS Attacks - and a Call to Enable BCP38

...In this talk we will analyze the global view of spoofing from Cloudflare, to understand IP spoofing on network-layer DoS attacks, and analyze geographic, longitudinal and network-specific characteristics of spoofing sources. We developed and applied IP spoofing detection techniques on three months of network-layer DoS traces, and used the insights to understand where and why BCP38 is most urgently needed.

By: Vasileios Giotsas

Full Abstract and Presentation Materials:
https://www.blackhat.com/eu-23/briefings/schedule/#a-world-view-of-ip-spoofing-in-l-volumetric-dos-attacks---and-a-call-to-enable-bcp-35659

attacks call cloudflare detection dos enable global ip spoofing network spoofing techniques understand volumetric world