Security mechanism for IPv6 stateless address autoconfiguration

Praptodiyono, Supriyanto; Murugesan, Raja Kumar; Hasbullah, Iznan H.; Wey, Chong Yung; Kadhum, Mohammed M.; Osman, Azlan

doi:10.1109/icacomit.2015.7440150

Cited by 17 publications

(19 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Thus, it consumes higher computation time. Based on the previous research, SeND mechanism adds significant processing time and it takes 367.59 milliseconds to perform the message verification operation [12]. Hence, if SeND is implemented, its processes i.e.…”

Section: A Secure Neighbor Discovery (Send)mentioning

confidence: 99%

“…Although, SeND was able to prevent malicious attacks on IPv6 neighbor discovery. However, researches have proven [11,12] that SeND has a drawback like high computation to generate the options especially the CGA option and RSA signature. Thus, it consumes higher computation time.…”

Section: A Secure Neighbor Discovery (Send)mentioning

confidence: 99%

“…This mechanism to some extent addressed the issue of complexity by introducing a new scheme compared to the SeND mechanism. However, SSAS still requires significant amount of time to process the ND messages [12]. Recently, Trust-ND has been proposed that claims to be the lightweight mechanism compared to SeND and SSAS schemes.…”

mentioning

confidence: 99%

“…SeND mechanism was suggested to solve the security concerns of ND messages. However, this mechanism is not trivial due to its design which possess heavy computation and complexity issues during ND message processing [11,12]. In order to address this issue, Simple Secure Addressing Scheme (SSAS) was proposed.…”

mentioning

confidence: 99%

“…Considering this vulnerability with DAD process, some of the security mechanisms have been proposed such as; SeND [10], SSAS [11], and Trust-ND [12]. SeND mechanism was suggested to solve the security concerns of ND messages.…”

mentioning

confidence: 99%

See 4 more Smart Citations

Improved Mechanism to Prevent Denial of Service Attack in IPv6 Duplicate Address Detection Process

Rehman¹,

Manickam²

2017

ijacsa

View full text Add to dashboard Cite

Abstract-From the days of ARPANET, with slightly over two hundred connected hosts involving five organizations to a massive global, always-on network connecting hosts in the billions, the Internet has become as important as the need for electricity and water. Internet Protocol version 4 (IPv4) could not sustain the growth of the Internet. In ensuring the growth is not stunted, a new protocol, i.e. Internet Protocol version 6 (IPv6) was introduced that resolves the addressing issue IPv4 had. In addition, IPv6 was also laden with new features and capabilities. One of them being address auto-configuration. This feature allows hosts to self-configure without the need for additional services. Nevertheless, the design of IPv6 has led to several security shortcomings. Duplicate Address Detection (DAD) process required for auto-configuration is prone to Denial of Service (DoS) attack in which hosts are unable to configure themselves to join the network. Various mechanisms, SeND, SSAS, and the most recent being Trust-ND, have been introduced to address this issue. Although these mechanisms were able to circumvent DoS attack on DAD process, they have introduced various side effects, i.e. complexities and degradation of performance. This paper reviews the shortcomings of these mechanism and proposes a new mechanism, Secure-DAD, that addresses them. The performance comparison between Trust-ND and Secure-ND also showed that Secure-DAD is more promising with improvement in terms of processing time reduction of 45.1% compared to Trust-ND while preventing DoS attack in IPv6 DAD process.

show abstract

Section: A Secure Neighbor Discovery (Send)mentioning

confidence: 99%

Section: A Secure Neighbor Discovery (Send)mentioning

confidence: 99%

mentioning

confidence: 99%

mentioning

confidence: 99%

mentioning

confidence: 99%

See 3 more Smart Citations

Improved Mechanism to Prevent Denial of Service Attack in IPv6 Duplicate Address Detection Process

Rehman¹,

Manickam²

2017

ijacsa

View full text Add to dashboard Cite

show abstract

An Improved Secure Router Discovery Mechanism to Prevent Fake RA Attack in Link Local IPv6 Network

Arjuman

Manickam

Karuppayah

2021

Communications in Computer and Information Science

View full text Add to dashboard Cite

I would like to express my unlimited gratitude to God and Guru who bestowed me inner with strength, good health, a clear mind and a conducive environment to conduct my research and complete this thesis. I would like to extend my gratitude to all my family members especially my parents late Mr Arjuman and Madam Suppamah, my dearest wife Meena Munusamy and her parents as well as, my daughters Poomagal and Koomagal for their love, untiring support and cooperation that helped me to complete this research work. I am indebted to the Ministry of Education (MOE) (formerly known as the Ministry of Higher Education (MOHE)) for providing me with funding through the MyBrain Postgraduate Scholarship Programme to complete this research work. Furthermore, I would like to express sincere appreciation and gratitude to my supervisor, Associate Professor Dr Selvakumar Manickam for his support, guidance, valuable insight and supervision that enabled me to complete this research work. At this juncture, I would also like to thank the Director of the National Advanced IPv6 Centre, Professor Dr Bahari Belaton and the Deputy Director Associate Professor Dr Wan Tat Chee for their guidance and support. Furthermore I would like to take this opportunity to thank all the senior lecturers, my fellow researchers and all the supporting staff within the centre for their kind support in completing my research work. Finally, I would like to extend my greatest appreciation to all my well wishers and friends who have supported me both directly and indirectly throughout the course of my studies.

show abstract

Detection and Defense Mechanisms on Duplicate Address Detection Process in IPv6 Link-Local Network: A Survey on Limitations and Requirements

et al. 2018

View full text Add to dashboard Cite

The deployment of Internet Protocol Version 6 (IPv6) has progressed at a rapid pace. IPv6 has introduced new features and capabilities that is not available in IPv4. However, new security risks and challenges emerge with any new technology. Similarly, Duplicate Address Detection (DAD), part of Neighbor Discovery Protocol in IPv6 protocol, is subject to security threats such as denial-of-service attacks. This paper presents a comprehensive review on detection and defense mechanisms for DAD on fixed network. The strengths and weaknesses of each mechanism to Secure-DAD process are discussed from the perspective of implementation and processing time. Finally, challenges and future directions are presented along with feature requirements for the new security mechanism to secure DAD procedure in an IPv6 link-local network.

show abstract

Security mechanism for IPv6 stateless address autoconfiguration

Cited by 17 publications

References 8 publications

Improved Mechanism to Prevent Denial of Service Attack in IPv6 Duplicate Address Detection Process

Improved Mechanism to Prevent Denial of Service Attack in IPv6 Duplicate Address Detection Process

An Improved Secure Router Discovery Mechanism to Prevent Fake RA Attack in Link Local IPv6 Network

Detection and Defense Mechanisms on Duplicate Address Detection Process in IPv6 Link-Local Network: A Survey on Limitations and Requirements

Contact Info

Product

Resources

About