DNS-based defense against IP spoofing attacks

Abstract

Many attacks on the Internet spoof the source IP addresses. Numerous techniques have been researched and developed thus far to cope with this, but they are not yet sufficient. This paper proposes a Domain Name System-based technique for handling the issue. An attacker needs the IP address of an application server, the target of attack, to access there. To obtain the address, the attacker queries the DNS full-service resolver to resolve the server's fully qualified domain name. While the attacker is inquiring about the address, it cannot spoof its address in the proposed scheme. The proposed scheme informs the application server-side gateway of the client's address, with which the gateway can ignore access by those other than the informed address. © 2012 Springer-Verlag.