Xiaowei Yang, Assistant Professor, Duke University
The lack of accountability makes the Internet vulnerable to numerous attacks, including prefix hijacking, route forgery, source address spoofing, and DoS flooding attacks. This paper takes a “dirty-slate” approach to bring accountability to the present Internet with low-cost and deployable enhancements. Our design, IPA, uses the readily available top-level DNSSEC infrastructure and BGP to bootstrap accountability. We integrate it with a suite of security building blocks to combat various network-layer attacks. Our evaluation shows that IPA introduces modest overhead, is gradually deployable, and offers incentives for early adoption.
Xiaowei Yang is an assistant professor in the Department of Computer Science at Duke University. Before joining Duke, she was an assistant professor in the Department of Computer Science at the University of California at Irvine. She received a Ph.D. in Computer Science from Massachusetts Institute of Technology, and a BE in Electronic Engineering from Tsinghua University. She is a recipient of the NSF CAREER award.