Uploaded November 2025 | Updated September 2026, 1 week ago
Designing an effective Source Address Validation (SAV) filter requires eliminating false positives (i.e., preventing the blocking of legitimate traffic) while also preserving directionality to reduce false negatives. BAR-SAV, an emerging initiative within the IETF, addresses this challenge by leveraging complementary data sources such as BGP UPDATE messages, Autonomous System Provider Authorization (ASPA), and Route Origin Authorization (ROA). This approach empowers network operators to build more accurate and robust SAV and BGP prefix filters, thereby enhancing overall routing security.
Kotikalapudi Sriram: Sriram received B.S. and M.S. degrees from the Indian Institute of Technology, Kanpur, India, and a Ph.D. degree from Syracuse University, all in electrical engineering. He is currently a Senior Engineer in the Communications Technologies Laboratory at the National Institute of Standards and Technology (NIST), Gaithersburg, Maryland. Previously, he held various positions at Bell Laboratories - the innovations arm of Nokia and formerly that of AT&T. His titles at Bell Laboratories included Consulting Member of Technical Staff (highest rank in the technical ladder) and Distinguished Member of Technical Staff. His current research interests include inter-domain routing architecture and security, DDoS mitigation, and Source Address Validation. He is a co-author of several IETF RFCs related to RPKI, BGPsec, route leak mitigation, and source address validation. He is a contributing author and a coeditor of the book "Cable Modems: Current Technologies and Applications" (IEEE Press, 1999). He holds 18 U.S. patents. He is a recipient of the US Department of Commerce Gold Medal. He is a Fellow of the IEEE.
Designing an effective Source Address Validation (SAV) filter requires eliminating false positives (i.e., preventing the blocking of legitimate traffic) while also preserving directionality to reduce false negatives. BAR-SAV, an emerging initiative within the IETF, addresses this challenge by leveraging complementary data sources such as BGP UPDATE messages, Autonomous System Provider Authorization (ASPA), and Route Origin Authorization (ROA). This approach empowers network operators to build more accurate and robust SAV and BGP prefix filters, thereby enhancing overall routing security.
Kotikalapudi Sriram: Sriram received B.S. and M.S. degrees from the Indian Institute of Technology, Kanpur, India, and a Ph.D. degree from Syracuse University, all in electrical engineering. He is currently a Senior Engineer in the Communications Technologies Laboratory at the National Institute of Standards and Technology (NIST), Gaithersburg, Maryland. Previously, he held various positions at Bell Laboratories - the innovations arm of Nokia and formerly that of AT&T. His titles at Bell Laboratories included Consulting Member of Technical Staff (highest rank in the technical ladder) and Distinguished Member of Technical Staff. His current research interests include inter-domain routing architecture and security, DDoS mitigation, and Source Address Validation. He is a co-author of several IETF RFCs related to RPKI, BGPsec, route leak mitigation, and source address validation. He is a contributing author and a coeditor of the book "Cable Modems: Current Technologies and Applications" (IEEE Press, 1999). He holds 18 U.S. patents. He is a recipient of the US Department of Commerce Gold Medal. He is a Fellow of the IEEE.
