Security threats for IPv6 transition strategies: A review

Ahmed, Amjed Sid; Hassan, Rosilah; Othman, Nur Effendy

doi:10.1109/ice2t.2014.7006224

Cited by 10 publications

(5 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Where x1: NUM, x2: AVRG, and y: attack (A) or normal (N) 4. Determination of rules aggregation and defuzzification processes: the rule aggregation involves combining the fuzzy sets that represent the rules' output into a single fuzzy set.…”

Section: Construction Of Fuzzy Rules: Two Fuzzy Linguisticmentioning

confidence: 99%

“…As the deployment of IPv6 proceeds, security issues concurrently come up. Several research have been published to address the open issues of IPv6 protocol vulnerabilities [4,9]. Some vulnerabilities discovered to date can be fixed through software patches, for instance, tunnel incorrect configuration that allows external traffic to flow through it.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Untitled

2019

IAJIT

View full text Add to dashboard Cite

Detecting the denial of service attacks that solely target the router is a maximum security imperative in deploying IPv6 networks. The state-of-the-art Denial of Service detection methods aim at leveraging the advantages of flow statistical features and machine learning techniques. However, the detection performance is highly affected by the quality of the feature selector and the reliability of datasets of IPv6 flow information. This paper proposes a new neuro-fuzzy inference system to tackle the problem of classifying the packets in IPv6 networks in crucial situation of small-supervised training dataset. The proposed system is capable of classifying the IPv6 router alert option packets into denial of service and normal by utilizing the neuro-fuzzy strengths to boost the classification accuracy. A mathematical analysis from the fuzzy sets theory perspective is provided to express performance benefit of the proposed system. An empirical performance test is conducted on comprehensive dataset of IPv6 packets produced in a supervised environment. The result shows that the proposed system overcomes robustly some state-of-the-art systems.

show abstract

Section: Construction Of Fuzzy Rules: Two Fuzzy Linguisticmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Untitled

2019

IAJIT

View full text Add to dashboard Cite

show abstract

“…To exacerbate the issue, there is even a toolset that was developed to attack IPv6, called the Hacker's Choice IPv6 (THC-lPv6). The many attacks targeted towards NDP are further described in the following sections: 1) Spoofing Attack: This attack involves an attacking node that gains unauthorized access by making use of the address or identifier of another node [13]. This attack could also give rise to different attacks such as DoS and MITM (Man-In-The-Middle) attacks.…”

Section: ) Redirectmentioning

confidence: 99%

Denial of Service Attack over Secure Neighbor Discovery (SeND)

Ahmed¹,

Hassan²,

Othman³

2018

Int. J. Adv. Sci. Eng. Inf. Technol.

Self Cite

View full text Add to dashboard Cite

IPv6, the Internet Protocol suite version 6, uses a Neighbor Discovery Protocol (NDP). NDP mainly replaces router discovery and the Address Resolution Protocol (ARP) and after that redirects the functions used in IPv4, i.e. the Internet Protocol suite version 4. The NDP system is a stateless protocol since it does not need the dynamic host's configuration protocol server to enable the various IPv6 nodes for determining the connected hosts along with the IPv6 network routers. To add layers of protection to NDP, the SeND (Secure Neighbor Discovery) extension was developed, which provides router authorization, proof of address ownership, and message protection for the protocol. SeND employs CGAs (Cryptographically Generated Addresses) and X.509 certificates. Despite its many advantages, deploying SeND is not easy, and it is still vulnerable to specific DoS (Denial-of-Service) attacks. The components of SeND and its responses to NDP threats are further elaborated in this paper. Also, an overview of the implementation of SeND, its limitations, existing vulnerabilities, and current deployment challenges are also presented. Furthermore, to test the performance of SeND under a DoS attack, a test bed was implemented, and the results discussed.

show abstract

“…Consequently, IPv4 and IPv6 will need to coexist for some time before IPv4 can be completely excluded. As IPv4 and IPv6 are not compatible with each other, numerous transition technologies have been developed by the IETF to help in the gradual yet smooth full adoption of IPv6 [3].…”

Section: Introductionmentioning

confidence: 99%

“…However, Dual Stack, even with "Happy Eyeballs", introduces unnecessary complication as both IPv4 and IPv6 protocols should be maintained and makes the network nodes more vulnerable to security threats. Not to say that it does not participate in solving the problem of the depletion of IPv4 addresses [3].…”

Section: Introductionmentioning

confidence: 99%

survey on the performance analysis of IPv6 transition technologies

Al-hamadani

Lencse

2021

Acta Tech. Jaurinensis

View full text Add to dashboard Cite

As the public IPv4 address space has already been depleted, the full deployment of IPv6 became indispensable, especially for service providers, as it offers a sufficient address pool. However, the ongoing IPv6 transition seems to be a lengthy task because of the numerous challenges it faces. Therefore, it is expected that IPv4 and IPv6 will coexist for a long time. Consequently, many transition technologies have been developed for this purpose. Several research papers have conducted performance analysis for a number of these transition technologies and even compared them based on some measuring metrics like RTT, throughput, jitter, packet loss, and so on. This paper reviews the results of these papers, discusses their findings, and gives some guidelines fora feasible benchmarking methodology.

show abstract

Security threats for IPv6 transition strategies: A review

Cited by 10 publications

References 11 publications

Untitled

Untitled

Denial of Service Attack over Secure Neighbor Discovery (SeND)

survey on the performance analysis of IPv6 transition technologies

Contact Info

Product

Resources

About