How to mitigate the effect of scans on mapping systems

LISP is a map-and-encap solution where the inner header addresses are identifiers and outer header ad- dresses are locators. A set of locators is associate to each identifier via a mapping. Mappings are obtained by querying a mapping system like in DNS where the DNS is queried to resolve a name. Unfortunately, with on-demand mappings, some delay is observed between the reception of a packet by the border router and the time it can effectively be sent when the router sees for the first time the destination identifier. To reduce the impact of such mapping resolution delay, the gleaning functionalityhas been proposed. However, in it original form, the gleaning, introduces a cache poisoning threat. This paper presents an extended gleaning approach that limits the risk of cache poisoning and mitigates the impact of port scanning on the mapping system loa