Title :
Improving security for IPv6 neighbor discovery
Author :
Amjed Sid Ahmed;Rosilah Hassan;Nor Effendy Othman
Author_Institution :
Research Centre for Software Technology and Management, Network and Communication Technology Lab, Faculty of Information Science and Technology, Universiti Kebangsaan Malaysia, 43600 UKM, Bangi, Selangor, Malaysia
Abstract :
For a successful communication in a LAN network Internet Protocol version 4 (IPv4) has to identify Machine Code Address (MAC) of the target host which was possible via using Address Resolution Protocol (ARP). This is improved in IPv6 in which nodes uses Neighbor Discovery Protocol (NDP) to access MAC address of other nodes. In addition to this it enables accessibility to routers and reachability of information on paths to active neighbor discovery. When NDP was initially defined, there was a belief that the local link would be made up of mutually trusting nodes. On the contrary, this has been rectified in wireless connection of networks in which the situation has radically changed. The lack of authorization and vulnerability to various attacks, various mechanisms have been implemented to counter this effect. These mechanisms are of two types which are Secured Neighbor Discovery Protocol (SEND) and Internet Protocol Security (IPSec). A keen interest is taken to analyze this mechanisms showing how it works including the shortcoming of each and various recommendations. Also we analyze each of NDP attacks in details, define the requirements to mitigate each of them and proposed a conceptual model layout in order to secure NDP.
Keywords :
"Peer-to-peer computing","Computer crime","Internet","Routing protocols","Authorization"
Conference_Titel :
Electrical Engineering and Informatics (ICEEI), 2015 International Conference on
Print_ISBN :
978-1-4673-6778-3
Electronic_ISBN :
2155-6830
DOI :
10.1109/ICEEI.2015.7352509