A Secure Packet Filtering Mechanism for Tunneling over Internet

Lee, Wan-Jik; Heo, Seok-Yeol; Byun, Tae-Young; Sohn, Young-Ho; Han, Kijun

doi:10.1007/978-3-540-72685-2_59

Cited by 4 publications

(2 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Finally, Lee [35] has presented his own spoofing mitigation method, where he tackles sneaky packets that are trying to avoid filters by presenting a packet-filtering mechanism using the well-known Linux Netfilter framework [36].…”

Section: Mitigation Methodsmentioning

confidence: 99%

Analysis of the Security Challenges Facing the DS-Lite IPv6 Transition Technology

Al-Azzawi

Lencse

2023

Electronics

View full text Add to dashboard Cite

This paper focuses on one of the most prominent IPv6 transition technologies named DS-Lite (Dual-Stack Lite). The aim was to analyze the security threats to which this technology might be vulnerable. The analysis is based on the STRIDE method, which stands for Spoofing, Tampering, Repudiation, Information Disclosure, and Elevation of Privilege. A testbed was built for the DS-Lite topology using several virtual machines, which were created using CentOS Linux images. The testbed was used to perform several types of attacks against the infrastructure of DS-Lite, especially against the B4 (Basic Bridging Broadband) and the AFTR (Address Family Transition Router) elements, where it was shown that the pool of source ports can be exhausted in 14 s. Eventually, the most common attacks that DS-Lite is susceptible to were summarized, and methods for mitigating such attacks were proposed.

show abstract

Section: Mitigation Methodsmentioning

confidence: 99%

Analysis of the Security Challenges Facing the DS-Lite IPv6 Transition Technology

Al-Azzawi

Lencse

2023

Electronics

View full text Add to dashboard Cite

show abstract

“…Finally, Lee [30] has presented his own spoo ng mitigation method, where he tackles sneaky packets, who are trying to avoid lters by presenting packet ltering mechanism using the well-known Linux Net lter framework [31].…”

Section: Mitigation Methodsmentioning

confidence: 99%

The Possible Security Issues of the DS-Lite IPv6 Transition Technology

Al-Azzawi

Lencse

2022

Preprint

View full text Add to dashboard Cite

This paper focuses on one of the most prominent IPv6 transition technologies named DS-Lite (Dual Stack Lite). The aim is to analyze the security threats that this technology might be vulnerable to. The analysis is based on the STRIDE method that stands for Spoofing, Tampering, Repudiation, Information disclosure and Elevation of privilege. Using the DFD (Data Flow Diagram) of a DS-Lite system, we summarized the potential security vulnerabilities and potential attack points within this infrastructure. We have also built a testbed for DS-Lite topology using several virtual machines, which were created using CentOS Linux images. We used our testbed to perform MitM (Man in the Middle) attack and other type of attacks against the B4 (border gateway) and the AFTR (Address Family Transition Router) and then to monitor their performance and the number of packets being translated under attack by different number of clients using several attacking toolkits.

show abstract

Securing tunnel endpoints for IPv6 transition in enterprise networks

Taib

Budiarto

2010

2010 International Conference on Science and Social Research (CSSR 2010)

View full text Add to dashboard Cite

A Secure Packet Filtering Mechanism for Tunneling over Internet

Cited by 4 publications

References 8 publications

Analysis of the Security Challenges Facing the DS-Lite IPv6 Transition Technology

Analysis of the Security Challenges Facing the DS-Lite IPv6 Transition Technology

The Possible Security Issues of the DS-Lite IPv6 Transition Technology

Securing tunnel endpoints for IPv6 transition in enterprise networks

Contact Info

Product

Resources

About