Privacy Preserving IPv6 Address Auto-Configuration for Internet of Things

Mavani, Monali; Asawa, Krishna

doi:10.1007/978-981-10-5523-2_1

“…In the IPv4 era, it can only be achieved with the help of the network service, such as DHCP servers [ 59 ] and SDN [ 29 , 30 ]. In the IPv6 era, the massive address space and SLAAC enable auto-configuration of dynamic addresses [ 26 ]. IP address hopping of a server is harder, since its address needs to be known by clients to allow inbound traffic.…”

Section: Background and Related Workmentioning

confidence: 99%

Addressless: A new internet server model to prevent network scanning

Hao

¹

,

Liu

²

,

Zhe

³

et al. 2021

PLoS ONE

1

0

View full text Add to dashboard Cite

Eliminating unnecessary exposure is a principle of server security. The huge IPv6 address space enhances security by making scanning infeasible, however, with recent advances of IPv6 scanning technologies, network scanning is again threatening server security. In this paper, we propose a new model named addressless server, which separates the server into an entrance module and a main service module, and assigns an IPv6 prefix instead of an IPv6 address to the main service module. The entrance module generates a legitimate IPv6 address under this prefix by encrypting the client address, so that the client can access the main server on a destination address that is different in each connection. In this way, the model provides isolation to the main server, prevents network scanning, and minimizes exposure. Moreover it provides a novel framework that supports flexible load balancing, high-availability, and other desirable features. The model is simple and does not require any modification to the client or the network. We implement a prototype and experiments show that our model can prevent the main server from being scanned at a slight performance cost.

show abstract

“…Mavani et al, has done several works on secure addressing and privacy preserving methodologies for IoT and Mobile environment paradigm [20,21,22]. In IoT, billions of devices can be addressed using IPv6 addressing scheme.…”

Section: Related Workmentioning

confidence: 99%

“…To mitigate this type of attacks by hiding the IPv6 address from attacker. They have proposed a secure privacy preserving method [20], which changes the IPv6 address of each device periodically and pseudorandomly in order to hide its identity. They analyzed the method using Cooja simulator to show that the method does not inflict much overhead for random changing of address and reconfiguration.…”

Section: Related Workmentioning

confidence: 99%

An SDN-IoT − Based Framework for Future Smart Cities

Ghosh¹,

Chatterjee²,

Shetty³

et al. 2020

Internet of Things and Secure Smart Environments

View full text Add to dashboard Cite

“…In the IPv4 era, it can only be achieved with the help of the network service, such as DHCP servers [54] and SDN [24,25]. In the IPv6 era, the massive address space and SLAAC enable auto-configuration of dynamic addresses [21]. IP address hopping of a server is harder, since its address needs to be known by clients to allow inbound traffic.…”

Section: Using Ipv6 Address Space To Enhance Security and Privacymentioning

confidence: 99%

“…There have been attempts to enhance the anti-scanning feature of the IP addresses, mainly by: 1) generating addresses that is semantically opaque and more random [17], 2) using temporal [18,19] or hopping [20][21][22][23][24][25] addresses with short lifetime, and further 3) using a unique address for each connection [26][27][28][29][30] or even packet [31,32].…”

Section: Introductionmentioning

confidence: 99%

Addressless: A New Internet Server Model to Prevent Network Scanning

Hao,

Liu,

Weng

et al. 2020

Preprint

0

View full text Add to dashboard Cite

Eliminating unnecessary exposure is a principle of server security. The huge IPv6 address space enhances security by making scanning infeasible, however, with recent advances of IPv6 scanning technologies, network scanning is again threatening server security. In this paper, we propose a new model named addressless server, which separates the server into an entrance module and a main service module, and assigns an IPv6 prefix instead of an IPv6 address to the main service module. The entrance module generates a legitimate IPv6 address under this prefix by encrypting the client address, so that the client can access the main server on a destination address that is different in each connection. In this way, the model provides isolation to the main server, prevents network scanning, and minimizes exposure. Moreover it provides a novel framework that supports flexible load balancing, high-availability, and other desirable features. The model is simple and does not require any modification to the client or the network. We implement a prototype and experiments show that our model can prevent the main server from being scanned at a slight performance cost.

show abstract

Privacy Preserving IPv6 Address Auto-Configuration for Internet of Things

Cited by 6 publications

References 18 publications

Addressless: A new internet server model to prevent network scanning

Addressless: A new internet server model to prevent network scanning

An SDN-IoT − Based Framework for Future Smart Cities

Addressless: A New Internet Server Model to Prevent Network Scanning

Contact Info

Product

Resources

About