IPv6 Network Attack Detection with HoneydV6

Characterizing the IPv6 Security Landscape by Large-Scale Measurements

“…Although a darknet simplifies the classification of traffic as being either benign or malicious, the fact it contains no actual services is likely to lower the interest of those with bad intents. These studies [4,9,12] do however show an increase in the amount of observed traffic throughout the years.…”

“…Once designed with security in mind, after 20 years of developments and implementations, some question whether IPv6 is indeed more secure than its predecessor. As IPv6 is gaining traction, the amount of malicious traffic transferred over it increases [12]. Besides attacks that are based on aspects of the new protocol, we can expect traditional attacks from IPv4 occurring over IPv6 as well, as many types of these threats abuse features or phenomena on higher layers (e.g., the transport or application layer).…”

Hyhoneydv6: A hybrid Honeypot Architecture for IPv6 Networks

“…Our hybrid architecture extends the low-interaction honeypot Honeydv6 [16] and is called Hyhoneydv6.…”

“…Our mechanism works similar to the dynamic machine instantiation of Honeydv6 which creates low-interaction honeypots based on attackers requests [16].…”

“…The two major IPv6-capable low-interaction honeypot projects are Dionaea 2 and Honeydv6 3 [16]. Dionaea focuses on the emulation of wellknown services, such as SMB or SIP.…”