BAR-SAV for Source Address Validation and BGP Prefix Filtering

Learn about BAR-SAV (BGP-Assisted Route-based Source Address Validation), an emerging IETF initiative that addresses the critical challenge of designing effective Source Address Validation filters while eliminating false positives and preserving directionality to reduce false negatives. Explore how this innovative approach leverages complementary data sources including BGP UPDATE messages, Autonomous System Provider Authorization (ASPA), and Route Origin Authorization (ROA) to enable network operators to build more accurate and robust SAV and BGP prefix filters. Discover the technical foundations of this methodology and understand how it enhances overall routing security by providing a comprehensive framework for validating source addresses and filtering BGP prefixes. Gain insights from Kotikalapudi Sriram, a Senior Engineer at NIST's Communications Technologies Laboratory and former Distinguished Member of Technical Staff at Bell Laboratories, who brings extensive expertise in inter-domain routing architecture, security, DDoS mitigation, and source address validation, along with co-authorship of multiple IETF RFCs related to RPKI, BGPsec, and route leak mitigation.