Improving security for IPv6 neighbor discovery

Ahmed, Amjed Sid; Hassan, Rosilah; Othman, Nor Effendy

doi:10.1109/iceei.2015.7352509

Cited by 15 publications

(12 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The DoS is believed to be the second category of NDP vulnerabilities. The preventions of information flow between the attacked nodes and all other nodes, performed by malicious nodes, are likely to describe this type of attack (Ahmed et al, 2015a). The communication is also disallowed between the attacked nodes and specific intended addresses.…”

Section: Ndp Vulnerabilitiesmentioning

confidence: 99%

See 1 more Smart Citation

Impacts Evaluation of DoS Attacks Over IPv6 Neighbor Discovery Protocol

Ahmed

Hassan

Othman

et al. 2019

Journal of Computer Science

Self Cite

View full text Add to dashboard Cite

The Neighbor Discovery Protocol (NDP) is one of the main protocols in the Internet Protocol version 6 (IPv6) suite. It provides many basic functions for the normal operations of IPv6 in a Local Area Network (LAN), such as address auto-configuration and address resolution. However, NDP has several vulnerabilities that can be used by malicious nodes to launch attacks, because NDP messages are easily spoofed. Surrounding this problem many solutions have been proposed for securing NDP but these solutions either proposed new protocols that need to be supported by all nodes or built mechanisms that require the cooperation of all nodes. In this paper we overview NDP vulnerabilities and available solutions to overcome their impacts on IPv6 network. In addition a research test bed setup to implement these vulnerabilities was introduced. Moreover attacks that prove these vulnerabilities are implemented on different types of operating systems, Windows and Linux platforms. Three network metrics throughput, delay and resources consumption have been chosen to investigate, analyze and evaluate the impacts of NDP related attacks on IPv6 link-local communication. Overall, the results had shown that performance of Linux based operating system is better than Windows based operating system.

show abstract

Section: Ndp Vulnerabilitiesmentioning

confidence: 99%

“…The communication is also disallowed between the attacked nodes and specific intended addresses. Thirdly, the NDP is encountered by the attack of Flooding DoS (Ahmed et al, 2015b). The malicious nodes direct the traffic of other hosts to the victim node in such attack.…”

Section: Ndp Vulnerabilitiesmentioning

confidence: 99%

Impacts Evaluation of DoS Attacks Over IPv6 Neighbor Discovery Protocol

Ahmed

Hassan

Othman

et al. 2019

Journal of Computer Science

Self Cite

View full text Add to dashboard Cite

show abstract

“…During address autoconfiguration in IPv6 link local network, Internet control message protocol (ICMPv6) [9] message types are used by the hosts to communicate with neighboring hosts within a local link. However, studies [10,11] have shown that ICMPv6 messages are vulnerable to denial of service (DoS) attacks, especially during duplicate address detection (DAD) process while host(s) attempts to configure its own generated interface identifier (IID).…”

Section: A Denial Of Service Attacks On Ipv6 Networkmentioning

confidence: 99%

Denial of Service Attack in IPv6 Duplicate Address Detection Process

Rehman¹,

Manickam²

2016

ijacsa

View full text Add to dashboard Cite

Abstract-IPv6 was designed to replace the existing Internet Protocol, that is, IPv4. The main advantage of IPv6 over IPv4 is the vastness of address space. In addition, various improvements were brought to IPv6 to address the drawbacks in IPv4. Nevertheless, as with any new technology, IPv6 suffers from various security vulnerabilities. One of the vulnerabilities discovered allows Denial of Service Attack using the Duplicate Address Detection mechanism. In order to study and analyse this attack, an IPv6 security testbed was designed and implemented. This paper presents our experience with the deployment and operation of the testbed, and discussion on the outcome and data gathered from carrying out DoS attack in this testbed.

show abstract

“…Despite its many advantages, since it is assumed that every node in a link trusts the other, NDP is greatly susceptible to severe attacks. Nevertheless, there are instances where this assumption does not hold true, such as when wireless networks are utilized [5]. Malicious users can forge NDP messages by pretending to be legitimate nodes with the intention of attacking the protocol [6].…”

Section: Introductionmentioning

confidence: 99%

Denial of Service Attack over Secure Neighbor Discovery (SeND)

Ahmed¹,

Hassan²,

Othman³

2018

Int. J. Adv. Sci. Eng. Inf. Technol.

Self Cite

View full text Add to dashboard Cite

IPv6, the Internet Protocol suite version 6, uses a Neighbor Discovery Protocol (NDP). NDP mainly replaces router discovery and the Address Resolution Protocol (ARP) and after that redirects the functions used in IPv4, i.e. the Internet Protocol suite version 4. The NDP system is a stateless protocol since it does not need the dynamic host's configuration protocol server to enable the various IPv6 nodes for determining the connected hosts along with the IPv6 network routers. To add layers of protection to NDP, the SeND (Secure Neighbor Discovery) extension was developed, which provides router authorization, proof of address ownership, and message protection for the protocol. SeND employs CGAs (Cryptographically Generated Addresses) and X.509 certificates. Despite its many advantages, deploying SeND is not easy, and it is still vulnerable to specific DoS (Denial-of-Service) attacks. The components of SeND and its responses to NDP threats are further elaborated in this paper. Also, an overview of the implementation of SeND, its limitations, existing vulnerabilities, and current deployment challenges are also presented. Furthermore, to test the performance of SeND under a DoS attack, a test bed was implemented, and the results discussed.

show abstract

Improving security for IPv6 neighbor discovery

Cited by 15 publications

References 14 publications

Impacts Evaluation of DoS Attacks Over IPv6 Neighbor Discovery Protocol

Impacts Evaluation of DoS Attacks Over IPv6 Neighbor Discovery Protocol

Denial of Service Attack in IPv6 Duplicate Address Detection Process

Denial of Service Attack over Secure Neighbor Discovery (SeND)

Contact Info

Product

Resources

About