Characterizing the IPv6 Security Landscape by Large-Scale Measurements

Hendriks, Luuk; Sperotto, Anna; Pras, Aiko

doi:10.1007/978-3-319-20034-7_16

Cited by 4 publications

(3 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, DHCPv6 has vulnerabilities which could threaten the security of IPv6 network. Several studies, such as [12] and [13], addressed and discussed the DHCPv6 security issues. Some of the vulnerabilities allow attackers to exploit DHCPv6 messages to provide incorrect configuration parameters to the client, either to divert the client's traffic towards a rogue server or to cause DoS [14]- [16].…”

Section: Introductionmentioning

confidence: 99%

Authentication and Privacy Approach for DHCPv6

et al. 2019

View full text Add to dashboard Cite

Dynamic Host Configuration Protocol for IPv6 (DHCPv6) is used to allocate and distribute IPv6 addresses and network configuration parameters to DHCPv6 clients. Two well-known issues of DHCPv6 are privacy concerns due to lack of protection of client information in transit, and lack of verification mechanism that allows attackers to inject fake network configuration parameters into the network undetected. This paper proposes DHCPv6 security (DHCPv6Sec) approach that is based on a hybrid cryptosystem to provide authentication for the DHCPv6 server messages and to protect the privacy of the DHCPv6 client. The DHCPv6Sec was evaluated and compared to the Secure-DHCPv6 in terms of processing time, traffic overhead, rogue DHCPv6 server prevention, privacy protection, and DHCPv6 message size limitation. The experiment results show that the DHCPv6Sec has 52% less processing time; 74% less traffic overhead; and remarkable superiority in all aspects measured.

show abstract

Section: Introductionmentioning

confidence: 99%

Authentication and Privacy Approach for DHCPv6

et al. 2019

View full text Add to dashboard Cite

show abstract

“…Consequently, actual exchange of messages can occur between the two nodes. In IPv6, NDP uses ICMPv6 type field values ranging from 133 to 137 to achieve its purpose [6]. Table 1 presents the NDP-related ICMPv6 type field values and their use.…”

Section: Introductionmentioning

confidence: 99%

A Machine Learning Approach to Detect Router Advertisement Flooding Attacks in Next-Generation IPv6 Networks

et al. 2017

View full text Add to dashboard Cite

Background/Introduction RA flooding attack aims to exhaust all node resources, such as CPU and memory, attached to routers on the same link. A biologically-inspired machine learning based approach is proposed in this study to detect RA flooding attacks. Methods The proposed technique exploits information gain ratio (IGR) and Principal Component Analysis (PCA) for feature selection and a Support Vector Machine (SVM) based predictor model, which can also detect input traffic anomaly.

show abstract

“…Such scaling barriers preclude many IPv4 defense schemes, including URL content categorization, IP reputation systems and IP blacklisting [6]. Adapting darknets (routable address spaces with no active services except passive packet collectors) for IPv6 space in the wider context of IPv6 situational awareness remains an active research area [7].…”

mentioning

confidence: 99%

The man-machine integration era

Bilar

2016

Preprint

View full text Add to dashboard Cite

Through sensor ubiquity, the man-machine integration era is upon us. This integration is taking place in distributed, continuously changing, optimizing/learning, finite precision feedback systems. Security challenges of such systems abound, also due to constantly co-evolving threat actors and changing environments. Are we adequately preparing to defend such systems, and more importantly: how do we ensure they are worth defending? This position paper posits we are ill-prepared, due to perverse incentives affecting methodology, results and foundational corpuses. With respect to the first question, we will corroborate this ill-preparedness in the context of a basic requirement – situational awareness – for so-called Moving Target Defenses. We’ll argue that the second question hinges on a deceptively straightforward permanence invariant: The ability to robustly encode the infinite value of a human being in finite precision systems. Here too, we are failing to develop needed toolsets and skills. Successfully tackling both questions may determine the future winning model of the man-machine integration era; whether we’ll lose the Republic of the People to the People’s Republic.

show abstract

Characterizing the IPv6 Security Landscape by Large-Scale Measurements

Cited by 4 publications

References 10 publications

Authentication and Privacy Approach for DHCPv6

Authentication and Privacy Approach for DHCPv6

A Machine Learning Approach to Detect Router Advertisement Flooding Attacks in Next-Generation IPv6 Networks

The man-machine integration era

Contact Info

Product

Resources

About