An Improved Secure Router Discovery Mechanism to Prevent Fake RA Attack in Link Local IPv6 Network

Arjuman, Navaneethan C.; Manickam, Selvakumar; Karuppayah, Shankar

doi:10.1007/978-981-16-8059-5_15

Cited by 3 publications

(4 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Arjuman et al [21] proposed an authentication framework to enhance the security of NDP. Their approach leveraged the multicast key management protocol as an application layer key management scheme to address the multicast problem in neighbor communication.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

An Adaptive Security Framework for Internet of Things Networks Leveraging SDN and Machine Learning

Hamarsheh

2024

Applied Sciences

View full text Add to dashboard Cite

The Internet of Things (IoT) is expanding rapidly with billions of connected devices worldwide, necessitating robust security solutions to protect these systems. This paper proposes a comprehensive and adaptive security framework called Enhanced Secure Channel Authentication using random forests and software-defined networking (SCAFFOLD), tailored for IoT environments. The framework establishes secure communication channels between IoT nodes using software-defined networking (SDN) and machine learning techniques. The key components include encrypted channels using session keys, continuous traffic monitoring by the SDN controller, ensemble machine-learning for attack detection, precision mitigation via SDN reconfiguration, and periodic reauthentication for freshness. A mathematical model formally defines the protocol. Performance evaluations via extensive simulations demonstrate Enhanced SCAFFOLD’s ability to reliably detect and rapidly mitigate various attacks with minimal latency and energy consumption overheads across diverse IoT network scenarios and traffic patterns. The multidimensional approach combining encryption, intelligent threat detection, surgical response, and incremental hardening provides defense-in-depth to safeguard availability, integrity, and privacy within modern IoT systems while preserving quality of service.

show abstract

Section: Related Workmentioning

confidence: 99%

“…Queue Length: Longer queues at the nodes imply traffic accumulation and possible congestion. Techniques like FLCC [21] employ queue length to detect congestion. Rate limiting provides immediate congestion relief but can impact throughput.…”

mentioning

confidence: 99%

An Adaptive Security Framework for Internet of Things Networks Leveraging SDN and Machine Learning

Hamarsheh

2024

Applied Sciences

View full text Add to dashboard Cite

show abstract

“…However, the SEND mechanism is not widely used. Arjuman N C. [4] introduced an authentication mechanism to improve the security of NDP. The proposed framework uses the multicast key management protocol as an application layer key management scheme to solve the multicast problem in neighbor communication.…”

Section: Related Work and Backgroundmentioning

confidence: 99%

“…When two hosts start communication, it is necessary to know the MAC address of the communicating host. In IPv4 communication, the Address Resolution Protocol (ARP) [4] is required to look up the MAC address for a given IP address. Meanwhile, in IPv6 communication, the NDP [5] protocol is responsible for the lookup of the MAC address, which lacks authentication.…”

Section: Introductionmentioning

confidence: 99%

Research on the Security of IPv6 Communication Based on Petri Net under IoT

Han

Zhang

Wang

et al. 2023

Sensors

View full text Add to dashboard Cite

The distribution of wireless network systems challenges the communication security of Internet of Things (IoT), and the IPv6 protocol is gradually becoming the main communication protocol under the IoT. The Neighbor Discovery Protocol (NDP), as the base protocol of IPv6, includes address resolution, DAD, route redirection and other functions. The NDP protocol faces many attacks, such as DDoS attacks, MITM attacks, etc. In this paper, we focus on the communication-addressing problem between nodes in the Internet of Things (IoT). We propose a Petri-Net-based NS flooding attack model for the flooding attack problem of address resolution protocols under the NDP protocol. Through a fine-grained analysis of the Petri Net model and attacking techniques, we propose another Petri-Net-based defense model under the SDN architecture, achieving security for communications. We further simulate the normal communication between nodes in the EVE-NG simulation environment. We implement a DDoS attack on the communication protocol by an attacker who obtains the attack data through the THC-IPv6 tool. In this paper, the SVM algorithm, random forest algorithm (RF) and Bayesian algorithm (NBC) are used to process the attack data. The NBC algorithm is proven to exhibit high accuracy in classifying and identifying data through experiments. Further, the abnormal data are discarded through the abnormal data processing rules issued by the controller in the SDN architecture, to ensure the security of communications between nodes.

show abstract