LIPS: Lightweight Internet Permit System for Stopping Unwanted Packets

Abstract

Abstract. In this paper, we propose a Lightweight Internet Permit System (LIPS) that provides a lightweight, scalable packet authentication mechanism for ensuring traffic-origin accountability. LIPS is a simple extension of IP, in which each packet carries an access permit issued by its destination host or gateway, and the destination verifies the access permit to determine if a packet is accepted or dropped. We will first present the design and the prototype implementation of LIPS on Linux 2.4 kernel. We then use analysis, simulations, and experiments to show how LIPS can effectively prevent protected critical servers and links from being flooded by unwanted packets with negligible overheads. We propose LIPS as an domain-to-domain approach to stop unwanted attacks, without requiring broad changes in backbone networks as other approaches. Therefore, LIPS is incrementally deployable in a large scale on common platforms with minor software patches.

Tráfego Internet não Desejado: Conceitos, Caracterização e Soluções

“…É neste contexto o método LIPS (Lightweight Internet Permit System) [Choi et al, 2005] se propõe a identificar e bloquear o tráfego não desejado. LIPS fornece um mecanismo que permite a responsabilização do tráfego através da rápida autenticação de pacotes (fast packet authentication), ou seja, pacotes de tráfego não desejados são bloqueados e suas origens identificadas.…”