SMap: Internet-wide Scanning for Spoofing

arXiv:2003.05813v4 Announce Type: replace
Abstract: To protect themselves from attacks, networks need to enforce ingress filtering, i.e., block inbound packets sent from spoofed IP addresses. Although this is a widely known best practice, it is still not clear how many networks do not block spoofed packets. Inferring the extent of spoofability at Internet scale is challenging and despite multiple efforts the existing studies currently cover only a limited set of the Internet networks: they can either measure networks that operate …

addresses arxiv attacks best practice block clear cs.cr ingress internet ip addresses networks packets practice protect scale scanning smap spoofed spoofing