Routing In Trustworthy Networks With SAVA Nodes

摘要

In a trustworthy network with the mechanism of Source Address Validation Architecture (SAVA), each packet received and forwarded has been ensured to bold an authenticated source IP address, which can prevent the attackers to forge the originating IP address to evade responsibility for their malicious packets. However, it is impossible to deploy SAVA all over the Internet in one night. In this paper, we investigate the SAVA mechanism from the point of routing for a trustworthy network with a partial deployment of SAVA nodes. We propose a new routing algorithm, called Minimum Hop to First SAVA node (MHFS). Extensive simulations show that MHFS can not only guarantee that eacb route for packets includes at least one SAVA node, but also achieve a better successful probability for routing packets and a improvement in resource usage.