Security visualization tools and IPv6 addresses

Barrera, David; Oorschot, Paul C. van

doi:10.1109/vizsec.2009.5375538

Cited by 8 publications

(8 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several studies have revealed the importance of firewall management and some security issues when users start to deploy IPv6 [14], [15], [16], [9]. Indirectly, enterprises must protect their own organization firewall in order to sustain their business activities since they are using much more network applications compared to individual user.…”

Section: Frameworkmentioning

confidence: 99%

IPv6 attack scenarios testbed

Ali

Taib

Hussin

et al. 2012

2012 IEEE Symposium on Humanities, Science and Engineering Research

View full text Add to dashboard Cite

Deploying IPv6 in the enterprise network will increase the security issues since some of IPv6 features bring vulnerabilities. Thus, mitigating them with appropriate security policy is vital. By having attack scenario testing, it will expose network administrators to the IPv6 potential attack. For example, Bad ACK-Reset attack is used by an attacker to reset a new connection after exploiting network. Also, Packet Fragmentation attack is capable to control over the packet fragmentation services yet can cause problems in security measurement. Hence, this paper tested Bad ACK-Reset and Packet Fragmentation attack scenarios for analysis. This paper used Scapy (2.0.1) to generate packets for testing. A testbed simulation has been designed by using Graphical Network Simulator 3 (GNS3). Several ip6tables rules and access control lists (ACLs) were implemented at the host and the router respectively to counter Bad ACK-Reset and Packet Fragmentation attack scenarios. Information gained from the testing will provide a clear understanding on IPv6 security issues and help to design a proper network security policy. The current results from the testing can be used for future research in generating the security policies. Thus, our further research will focus on modelling the created security policy for IPv6 deployment.

show abstract

Section: Frameworkmentioning

confidence: 99%

IPv6 attack scenarios testbed

Ali

Taib

Hussin

et al. 2012

2012 IEEE Symposium on Humanities, Science and Engineering Research

View full text Add to dashboard Cite

show abstract

“…For the analysis of brute-force password guessing attacks, we recommend using word clouds along with parallel coordinate plots. In the case of IPv6 data sets, we offer two contributions [18]: a white space filtering technique that allows the visualization of the entire populated IPv6 address space, and the use of treemaps to visualize the hierarchy of IPv6 addresses.…”

Section: Proposal Of New Visualization Techniques We Propose a New Vmentioning

confidence: 99%

“…In network security, treemaps have been used to visualize firewall logs [5] and to visualize the structure of IPv6 addresses [18] (see further discussion in Chapter 6). Fischer et al…”

Section: Treemapsmentioning

confidence: 99%

“…Most current tools support IPv4, but not the new version of the protocol. In this chapter, we review the current state of IPv6 support in popular visualization tools, and propose two new techniques [18] for visualizing data sets with IPv6 addresses.…”

Section: Visualization Of Ipv6 Data Setsmentioning

confidence: 99%

“…Eliminating the whitespace is easily done as follows [18]. During the network capture, build a list of unique remote IPv6 addresses observed.…”

Section: Indexingmentioning

confidence: 99%

See 2 more Smart Citations

Towards classifying and selecting appropriate security visualization techniques

Barrera¹

Self Cite

View full text Add to dashboard Cite

The author has granted a nonexclusive license allowing Library and Archives Canada to reproduce, publish, archive, preserve, conserve, communicate to the public by telecommunication or on the Internet, loan, distribute and sell theses worldwide, for commercial or noncommercial purposes, in microform, paper, electronic and/or any other formats. L'auteur a accorde une licence non exclusive permettant a la Bibliotheque et Archives Canada de reproduire, publier, archiver, sauvegarder, conserver, transmettre au public par telecommunication ou par I'lnternet, preter, distribuer et vendre des theses partout dans le monde, a des fins commerciales ou autres, sur support microforme, papier, electronique et/ou autres formats. The author retains copyright ownership and moral rights in this thesis. Neither the thesis nor substantial extracts from it may be printed or otherwise reproduced without the author's permission. L'auteur conserve la propriete du droit d'auteur et des droits moraux qui protege cette these. Ni la these ni des extraits substantiels de celle-ci ne doivent etre imprimes ou autrement reproduits sans son autorisation. In compliance with the Canadian Privacy Act some supporting forms may have been removed from this thesis. While these forms may be included in the document page count, their removal does not represent any loss of content from the thesis. Conformement a la loi canadienne sur la protection de la vie privee, quelques formulaires secondares ont ete enleves de cette these. Bien que ces formulaires aient inclus dans la pagination, il n'y aura aucun contenu manquant.

show abstract