Towards the Security Analysis of the Five Most Prominent IPv4aaS Technologies

Al-Azzawi, Ameen

doi:10.14513/actatechjaur.v13.n2.530

Cited by 7 publications

(3 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The first step in applying the STRIDE method is to build the DFD of the examined system and specify the potential attacking points at each element. Therefore, the DFD for DS-Lite was built as shown in Figure 5, which shows the spots (1)(2)(3)(4)(5)(6)(7)(8)(9)(10)(11). The security analysis is divided into several groups such as the traffic between the client and B4, then between B4 and the AFTR, etc.…”

Section: Applying Stride To Ds-litementioning

confidence: 99%

“…Various transition technologies have been proposed to address this challenge, but each comes with its own set of drawbacks and vulnerabilities. In previous research work, a survey of the most prominent IPv6 transition technologies was conducted [2], in which it was pointed out that the combination of DNS64 [3] and NAT64 [4] could be a working solution for the communication of IPv6 clients with IPv4 servers.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Analysis of the Security Challenges Facing the DS-Lite IPv6 Transition Technology

Al-Azzawi

Lencse

2023

Electronics

Self Cite

View full text Add to dashboard Cite

This paper focuses on one of the most prominent IPv6 transition technologies named DS-Lite (Dual-Stack Lite). The aim was to analyze the security threats to which this technology might be vulnerable. The analysis is based on the STRIDE method, which stands for Spoofing, Tampering, Repudiation, Information Disclosure, and Elevation of Privilege. A testbed was built for the DS-Lite topology using several virtual machines, which were created using CentOS Linux images. The testbed was used to perform several types of attacks against the infrastructure of DS-Lite, especially against the B4 (Basic Bridging Broadband) and the AFTR (Address Family Transition Router) elements, where it was shown that the pool of source ports can be exhausted in 14 s. Eventually, the most common attacks that DS-Lite is susceptible to were summarized, and methods for mitigating such attacks were proposed.

show abstract

Section: Applying Stride To Ds-litementioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Analysis of the Security Challenges Facing the DS-Lite IPv6 Transition Technology

Al-Azzawi

Lencse

2023

Electronics

Self Cite

View full text Add to dashboard Cite

show abstract

“…The rapid growth of the Internet over the past few years has led to the actual depletion of IPv4 addresses in 2011 [1], which makes the adoption of IPv6 a necessity more than ever before. In addition to solving this problem, transitioning from IPv4 to IPv6 can help in solving many other problems such as the burden of NAT translation, the need for scalable routing tables, and the delay of the defragmentation process in the intermediary devices [2].…”

Section: Introductionmentioning

confidence: 99%

survey on the performance analysis of IPv6 transition technologies

Al-hamadani

Lencse

2021

Acta Tech. Jaurinensis

View full text Add to dashboard Cite

As the public IPv4 address space has already been depleted, the full deployment of IPv6 became indispensable, especially for service providers, as it offers a sufficient address pool. However, the ongoing IPv6 transition seems to be a lengthy task because of the numerous challenges it faces. Therefore, it is expected that IPv4 and IPv6 will coexist for a long time. Consequently, many transition technologies have been developed for this purpose. Several research papers have conducted performance analysis for a number of these transition technologies and even compared them based on some measuring metrics like RTT, throughput, jitter, packet loss, and so on. This paper reviews the results of these papers, discusses their findings, and gives some guidelines fora feasible benchmarking methodology.

show abstract

Security analysis of the MAP-T IPv6 transition technology

Al-Azzawi,

Lencse

2024

The Computer Journal

View full text Add to dashboard Cite

In this paper, we focus on one of the most prominent IPv6 transition technologies, namely Mapping of Address and Port using Translation (MAP-T), and we give attention to Mapping of Address and Port with Encapsulation (MAP-E) as well. We emphasize the uniqueness of MAP-T and MAP-E, and we discuss the differences between those two technologies, including their topology, functionality, and security vulnerabilities. We apply a threat modeling technique, Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege (STRIDE), to assess potential vulnerabilities in the MAP-T infrastructure. Furthermore, we build a testbed for MAP-T using the open-source software, Jool, and we conduct testing on the translation process capabilities of Jool and its port allocation per subscriber. Finally, we present various attacking scenarios against the main routers of MAP-T, such as IP address spoofing, information disclosure, and source port exhaustion, and we propose mitigation methods for several attacks.

show abstract

Towards the Security Analysis of the Five Most Prominent IPv4aaS Technologies

Cited by 7 publications

References 13 publications

Analysis of the Security Challenges Facing the DS-Lite IPv6 Transition Technology

Analysis of the Security Challenges Facing the DS-Lite IPv6 Transition Technology

survey on the performance analysis of IPv6 transition technologies

Security analysis of the MAP-T IPv6 transition technology

Contact Info

Product

Resources

About