HBIF-AD: A Hybrid Blockchain-based IP Filtering Method for Autonomous Domains

IP spoofing attacks pose a significant threat to network security, commonly employed in malicious activities such as Distributed Denial of Service attacks and man-in-the-middle attacks. These attacks severely compromise the security and reliability of the Internet. Existing IP filtering approaches primarily rely on gateway policies and access control lists, lack verifiability, cross-domain trust mechanisms, filtering accuracy and real-time performance. Such drawbacks limit the filtering effectiveness in complex and dynamic network environments. To address these challenges, this paper proposes a hybrid blockchain-based IP filtering method for autonomous domains (HBIF-AD). By leveraging the immutability of blockchain, HBIF-AD enables trustworthy proof generation for network traffic data. It builds an autonomous domain filtering mechanism through blockchain-based on-chain verification and parallel chain technology, thereby enhancing filtering precision and responsiveness. Additionally, smart contracts are utilized to reduce trust risks across domains. Experimental results demonstrate the feasibility and effectiveness of the proposed approach. The experimental results show that HBIF-AD can still maintain good filtering performance in high concurrency situations. Compared with existing methods, although there is an increase in latency, the filtering accuracy has been improved by about 10%.