Utilizing the Enhanced Risk Assessment Equation to Determine the Apparent Risk due to User Datagram Protocol (UDP) Flooding Attack

Abstract

Escalation of Internet-of-Thing (IoT) may cause internet users being exposed to IPv6 security issues. End-to-end connection feature in IPv6 can be misused by attackers to flood targeted host. Using User Datagram Protocol (UDP), attackers can certainly congest the network by injecting UDP packets during network communication. This will introduce risk if there is no precaution step taken. Enhanced risk assessment equation can be adopted to mitigate the perils. Thus, this paper presents the use of enhanced risk assessment equation to identify risk value that is caused by UDP flooding attack. The attack was simulated using OMNeT++ simulation software. The inputs that were considered in the enhanced equation are based on the features of the tested network scenarios. The obtained risk value can be used in determining appropriate mitigation techniques that help the organization in maintaining and strengthening their network. It also offers organization to secure their network resources and assets. Furthermore, this paper also reveals that the enhanced risk assessment equation is flexible to be used in any situation. Hereafter, more IPv6 based protocols will be tested to measure the capability of using the enhanced equation.

Application of Grounded Theory in Determining Required Elements for IPv6 Risk Assessment Equation

“…The threat value and vulnerability value are sorted according to the range score stated by [15]. As shown in Table III, UDP flooding attack gives the highest value which is 85.2.…”

“…Therefore, base score value is adequate element to be included in calculating risk value because it considers the security goal of the network. Base score has been introduced by Common Vulnerability Scoring System (CVSS) as a metric that represents basic qualities of vulnerability [15]. Base score also has considered the elements of security goal which are confidentiality, availability and integrity.…”