Roadmap of Security threats between IPv4/IPv6

Abusafat, Fadi; Pereira, Tiago; Santos, Henrique

doi:10.1109/iemtronics52119.2021.9422653

Cited by 2 publications

(1 citation statement)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…NDP enables nodes to discover and notify their neighbors on the same LAN of their presence. Additionally, NDP consolidates critical network management operations such as router discovery, AR, and DAD [10]. NDP is a collection of messages and procedures used to establish communication between nodes, routers, and hosts in a single IPv6 network.…”

Section: Introductionmentioning

confidence: 99%

NDPsec: Neighbor Discovery Protocol Security Mechanism

Al-Ani

Laghari

et al. 2022

IEEE Access

View full text Add to dashboard Cite

Internet Protocol version 6 (IPv6) is envisioned as the cornerstone for future internet connectivity and information technology (IT) expansion. Due to its enormous address pool, extendable headers, high level of security, and mobility, IPv6 is positioned as the next-generation Internet Protocol. NDP is an integral component of IPv6 since it resolves addresses, locates routers, and finds duplicated addresses in a local-link network. Because NDP is based on the premise that all nodes in the network are trustworthy, it is subject to a variety of attacks, including Denial of Service (DoS) on Duplicate Address Detection (DAD) attacks (aka. DoS-on-DAD), Address Resolution-based attacks, Router Advertisement (RA) based attacks, and Redirect attacks. This paper proposes an NDP security (NDPsec) mechanism based on the Ed25519 digital signature to authenticate IPv6 hosts to prevent unauthorized devices from joining the network. The proposed NDPsec mechanism is evaluated and compared to Secure NDP (SeND), Match-Prevention, and Trust-ND mechanisms. The performance is measured in terms of processing time, traffic overhead, and resilience against network-based attacks. The results obtained from the experiments showed that NDPsec successfully prevented cyberattacks, with approximately 144% less processing time and over 50% less traffic overhead compared to SeND (the default security mechanism for NDP protocol). The proposed NDPsec mechanism has remarkable superiority in terms of resilience against attacks compared to Match-Prevention and Trust-ND mechanisms.

show abstract

Section: Introductionmentioning

confidence: 99%