netsec-sig - [Security-WG] CAIDA Spoofer
Subject: Internet2 Network Security SIG
List archive
- From: Paul Howell <>
- To: "" <>
- Subject: [Security-WG] CAIDA Spoofer
- Date: Tue, 11 Dec 2018 14:14:10 +0000
- Accept-language: en-US
- Authentication-results: internet2.edu; dkim=none (message not signed) header.d=none;internet2.edu; dmarc=none action=none header.from=internet2.edu;
- Ironport-phdr: 9a23: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
- Spamdiagnosticoutput: 1:0
Hi, At this past Internet2 Technology Exchange, we held a half-day routing security workshop that you may have attended. During the workshop, several people discussed their experience with using an IP address spoofing
tool provided by CAIDA called spoofer (https://www.caida.org/projects/spoofer/). The conversations regarding spoofer included how it can be used to identify network
points where spoofed traffic is exiting, despite BCP38 filters implemented to block spoofed traffic. Also discussed were some of the challenges in understanding spoofer reports.
Recently I spoke with CAIDA about hosting a technical webinar (probably mid-January) on using and interpreting spoofer reports with an emphasis on the R&E community. CAIDA is receptive to this and has asked if anyone with feedback
on using spoofer would be willing to have a call to ensure the webinar hits the right topics.
If you would like to discuss your experiences with spoofer, please let me know and I will organize a call.
Regards,
Paul
Paul Howell
Chief Cyberinfrastructure Security Officer
Network Services, Internet2
100 Phoenix Drive, STE 111
Ann Arbor, MI 48108
Office: 734-352-4212
Email:
|
- [Security-WG] CAIDA Spoofer, Paul Howell, 12/11/2018
Archive powered by MHonArc 2.6.19.