The Blind Man's Bluff Approach to Security Using IPv6

Dunlop, Matthew; Groat, Stephen; Urbanski, William; Marchany, Randy; Tront, Joseph G.

doi:10.1109/msp.2012.28

Cited by 35 publications

(12 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Besides, in order to reduce the implementation cost, Badishi et al [61] achieved lightweight port hopping by constructing first-in-first-out mutation channel based on the transmission rate. Aimed at the problems of limited hopping space in IPv4 and fixed hopping period, Dunlop et al [29,62] proposed moving target defense mechanism based IPv6 (MT6D). In order to enlarge the hopping space, IPv6 address space is adopted.…”

Section: Single-layer Mtd Transformation Mechanism In Networkmentioning

confidence: 99%

Moving Target Defense Techniques: A Survey

Cheng

Zhang

Jian-cheng

et al. 2018

Security and Communication Networks

View full text Add to dashboard Cite

As an active defense technique to change asymmetry in cyberattack-defense confrontation, moving target defense research has become one of the hot spots. In order to gain better understanding of moving target defense, background knowledge and inspiration are expounded at first. Based on it, the concept of moving target defense is analyzed. Secondly, literature analysis method is adopted to explain the design principles and system architecture of moving target defense. In addition, some relevant key techniques are introduced from the aspects of strategy generation, shuffling implementation, and performance evaluation. After that, the applications of moving target defense in different network architectures are illustrated. Finally, existing problems and future trend in this field are elaborated so as to provide a basis for further study.

show abstract

Section: Single-layer Mtd Transformation Mechanism In Networkmentioning

confidence: 99%

Moving Target Defense Techniques: A Survey

Cheng

Zhang

Jian-cheng

et al. 2018

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

“…Aljosha et al [46] use an address hopping algorithm to change the address of the IoT server by a pre-communicated address generation algorithm to enhance the security of the IoT server and reduce the risk of being scanned. Dunlop et al [47] introduce an idea that repeatedly rotating the addresses of both the sender and receiver to maintain user privacy and protect against targeted network attacks.…”

Section: B Ipv6 Address Securitymentioning

confidence: 99%

Addressless: Enhancing IoT Server Security Using IPv6

et al. 2020

View full text Add to dashboard Cite

Nowadays more and more IoT devices, including a large number of IoT servers, have been deployed on the Internet. The security of IoT servers has always been a challenge. In this paper, a new model named addressless IoT server is proposed, which allows people to use the large IPv6 address space to protect IoT server security. The server is allocated an IPv6 prefix instead of an address. When the authenticated client initiates communication, it uses an encryption mechanism to generate a specific destination address under the prefix. The server verifies the destination address when receiving the packet, and discards the packet if the verification fails. In this way, the model can prevent attackers from perceiving the server and launching scans or attacks, while remains compatible with the current Internet. The prototype is implemented and an extensive set of experiments are conducted in this paper. The results demonstrate that the model can better protect server security. INDEX TERMS IPv6, IPv6 address space, Internet of Things, network security, prefix delegation.

show abstract

“…Defense (MT6D). The MT6D [2,3] involves nodes that change network addresses while maintaining active sessions. Leveraging the large address space in IPv6, the MT6D protocol changes IP addresses for communicating hosts in synchronization.…”

Section: Moving Target Ipv6mentioning

confidence: 99%

Strengthening MT6D Defenses with LXC-Based Honeypot Capabilities

Basam

Ransbottom

Marchany

et al. 2016

Journal of Electrical and Computer Engineering

Self Cite

View full text Add to dashboard Cite

Moving Target IPv6 Defense (MT6D) imparts radio-frequency hopping behavior to IPv6 networks by having participating nodes periodically hop onto new addresses while giving up old addresses. Our previous research efforts implemented a solution to identify and acquire these old addresses that are being discarded by MT6D hosts on a local network besides being able to monitor and visualize the incoming traffic on these addresses. This was essentially equivalent to forming a darknet out of the discarded MT6D addresses, but the solution presented in the previous research effort did not include database integration for it to scale and be extended. This paper presents a solution with a new architecture that not only extends the previous solution in terms of automation and database integration but also demonstrates the ability to deploy a honeypot on a virtual LXC (Linux Container) on-demand based on any interesting traffic pattern observed on a discarded address. The proposed architecture also allows an MT6D host to query the solution database for network activity on its relinquished addresses as a JavaScript Object Notation (JSON) object. This allows an MT6D host to identify suspicious activity on its discarded addresses and strengthen the MT6D scheme parameters accordingly. We have built a proof-of-concept for the proposed solution and analyzed the solution’s feasibility and scalability.

show abstract

The Blind Man's Bluff Approach to Security Using IPv6

Cited by 35 publications

References 9 publications

Moving Target Defense Techniques: A Survey

Moving Target Defense Techniques: A Survey

Addressless: Enhancing IoT Server Security Using IPv6

Strengthening MT6D Defenses with LXC-Based Honeypot Capabilities

Contact Info

Product

Resources

About