A World-View of IP Spoofing in L4 Volumetric DoS Attacks - and a Call to Enable BCP38

...In this talk we will analyze the global view of spoofing from Cloudflare, to understand IP spoofing on network-layer DoS attacks, and analyze geographic, longitudinal and network-specific characteristics of spoofing sources. We developed and applied IP spoofing detection techniques on three months of network-layer DoS traces, and used the insights to understand where and why BCP38 is most urgently needed.
By: Vasileios Giotsas
Full Abstract and Presentation Materials:
www.blackhat.com/eu-23/briefi...