To support automated backtrace of spoofed DDoS attacks, the DIS backend could support uploading of attacks to known DDoS reflectors and attempt to cross-correlate attacks based on start/end time and source IPs (which represent the target in spoofed DDoS attacks).
By having the uploaded attack reports include the source network (peering, local, or otherwise) - and having enough participants - then the attacks can hopefully be cross-correlated across peering networks back to the source, identified, and have address validation enabled (or work with the peering provider to filter/mitigate the traffic).
To support automated backtrace of spoofed DDoS attacks, the DIS backend could support uploading of attacks to known DDoS reflectors and attempt to cross-correlate attacks based on start/end time and source IPs (which represent the target in spoofed DDoS attacks).
By having the uploaded attack reports include the source network (peering, local, or otherwise) - and having enough participants - then the attacks can hopefully be cross-correlated across peering networks back to the source, identified, and have address validation enabled (or work with the peering provider to filter/mitigate the traffic).