MT6D: A Moving Target IPv6 Defense

A considerable amount of time will be needed before each system in the Internet can convert from Internet Protocol version 4 (IPv4) to Internet Protocol version 6 (IPv6). Three strategies have been proposed by the Internet Engineer Task Force (IETF) to help the transition from IPv4 to IPv6 which are dual stack, header translation and tunneling. Tunneling is used when two computers using IPv6 want to communicate with each other and the packet will travel through a region that uses IPv4. To pass through this region, IPv6 packet must be encapsulated in IPv4 packet to have an IPv4 address in order to make it IPv4 routing compatible. Internet Protocol security (IPsec) in transport mode carries the payload of the encapsulating packet as a plain data without any mean of protection. That is, two nodes using IPsec in transport mode to secure the tunnel can spoof the inner payload; the packet will be de-capsulated successfully and accepted. IETF mentioned this problem in many RFCs. According to RFC 3964 there is no simple way to prevent spoofing attack in IPv6 over IPv4 tunnel and longer term solutions would have to be deployed in both IPv4 and IPv6 networks to help identify the source of the attack, a total prevention is likely impossible. This study proposed a new spoofing defense mechanism based on IPsec’s protocol Encapsulated Security Payload (ESP). ESP’s padding area had been used to write the IPv6 source address of the encapsulated packet. Simulation is conducted based on two scenarios, one with spoofing attack and one without. The outcome proved that proposed mechanism has managed to eliminate spoofing threat in IPv6 over IPv4 tunnel.

In this article, we present a new method based on the securisation of an IPv6 (Internet Protocol version 6) address obtaining with the SLAAC (Stateless Address Autoconfiguration) method in the domestic network. The particularity of our domestic network is the presence of several Multihoming Internet service providers. The peripherals of the Home Network domain, especially routers are in charge of the relay of auto configuration messages coming from various routers of internet access providers. Our method allows the routers of the Home Network domain to filter the announcements of autoconfigurations called RA (Router Advertisements) according to the IPv6 addresses sources contained in the messages of autoconfiguration. The decision to relay or reject these announcements is based on a trusted table built from the addressing information obtained from the NDP protocol. Our method also aims to optimize the traffic in the Home Network domain by organizing routers to give them specific roles for the relay of information for autoconfiguration.

The pervasive interconnection of heterogeneous routing devices forms the fundamental infrastructure of modern Internet communication, making accurate router vendor identification a critical capability for multiple domains including network topology mapping, intelligent traffic engineering, and proactive cybersecurity defense. While Internet Protocol version 6 (IPv6) has achieved widespread global deployment as the next-generation Internet protocol, the opaque nature of its addressing mechanisms and protocol behaviors has created significant challenges in router attribute detection across IPv6 networks, leaving a crucial gap in network visibility and security analytics. To address this pressing challenge, we present IPv6 Router FingerPrinting (6RFP), an innovative lightweight fingerprinting methodology that establishes a new paradigm for IPv6 router vendor identification by systematically combining two complementary analytical dimensions: (i) comprehensive EUI-64 interface identifier analysis that captures vendor-specific hardware encoding patterns embedded in IPv6 addresses, and (ii) sophisticated IPv6 Identification Field characteristic profiling that reveals distinctive vendor implementations. Through extensive evaluation across diverse network environments, 6RFP demonstrates highly effective detection capabilities, achieving 85.79% accuracy—representing a remarkable 86.01% improvement over current state-of-the-art techniques—while maintaining minimal computational overhead suitable for real-time deployment.

Digital networks are introduced gradually, nowadays many industries they rely on Internet Protocol to provide direct connectivity to customers anytime, anywhere. IP is presently utilized in crucial regions including video control, telemedicine, Internet of Think, digital payments, telepresence, etc. The two protocols, Internet Protocol version 6 (IPv6) and Internet Protocol version 4 (IPv4), can be distinguished in terms of features, services, and performance. Nowadays communication companies are The exhaustion of IPv4 and the transition to IPv6. IPv6 has more IP addresses than IPv4. IPv6 uses 128 bits and IPv4 uses 32 bits . IPv4 is not more secure than IPv6. The efficiency of IPv6 and IPv4 is carried out to test to check the response between the target client and server, the routing protocol, The packet size interval between the router and the communication network simulation. All of these parameters are combined to simultaneously test IPv4 and IPv6 performance. Now that all data has been received, it turns out that IPv4 with all these specifications is not better than IPv6. The length of a packet affects how long it takes for a packet to reach its destination. Every time a small packet is sent, the duration is slow in IPv4 with routing OSPF protocol. The study is performed using the routing OSPF vector protocol. Every time a small packet is sent the duration remains slow in IPv4 using the OSPF protocol. Whenever a small packet is sent, the duration remains slow in IPv4 using OSPF protocol. The research will be conducted using the OSPF vector routing protocol.

Even though more customers are regularly coming to the Internet, IPv4 addresses have been reduced by the Internet Assigned Numbers Authority (IANA) and have been deactivated in domain name registries (RIRs). IPv6, being the sole important next-generation Internet protocol, has yet to be fully developed and deployed, owing to the lack of a scheme that might address the transfer of IPv4 resources to IPv6 networks as well as collective communication between the two incompatible protocols. The Transmission Control Protocol/Internet protocol version 4 (TCP/IPv4) addresses have been reported as being on the verge of collapsing, while the next generation Internet Protocol version 6 (IPv6) is being identified on a regular basis. Among other advantages, IPv6 provides a significantly wider address space, better address design, and more security. IPv6 distribution necessitates a thorough and meticulous setup in order to avoid network disturbance and reap the benefits of IPv6. Because of the problems with IPv4, IPv6 is currently becoming increasingly popular among organizations, businesses, and Internet Service Providers (ISP). This paper we will explores the evolution of Internet Protocol version 4 (IPv4), its key features, challenges, and limitations, and examines how Internet Protocol version 6 (IPv6) addresses these issues. Additionally, we will highlight the key differences between the two protocols and discuss the transition process from IPv4 to IPv6.

Internet Protocol version 6 (IPv6) is the current generation Internet protocol developed by the Internet Engineering Task Force (IETF) to handle the shortage of IP addresses in IPV4. The transition from IPv4 to IPv6 is gradually being done not happening as anticipated. It is unavoidable to have both IPv4 and IPv6 networks during the transition period, but unfortunately they are not compatible in nature. It is essential to maintain the IPv4 and IPv6 coexistence. The inter-communication ability of IPv4 and IPv6 is the dire need of network community. Many transition techniques are proposed in the recent years. This paper discussed the key difficulties in IPv4-IPv6 transition, and introduced the hybrid approach for coexistence of IPv4 and IPv6. It hybrid the advantages of weightage and tunneling translation techniques for providing inter-communication ability of IPv4 and IPv6. The proposed algorithm has been simulated and the performance metrics; transmission latency, throughput, jitter and delay have been analyzed from end to end host, through various scenarios includes IPv4 only, IPv6 Only, Dual stack, GRE tunneling. The performance of the proposed algorithm is analyzed and the future scope is discussed.

The fast growth of the Internet usage has caused problem on Internet protocol address space. To solve this problem, Internet Protocol version 6 (IPv6) was created to expand the availability of address spaces. An important part of the IPv6 suites is the Neighbour Discovery Protocol (NDP), which is geared towards substitution of Address Resolution Protocol in router discovery, and function redirection in Internet Protocol version 4 (IPv4). NDP includes the routing function which is determines which route a data packet will follow to arrive at its intended destination, and the address function which assigns unique addresses to each and every device connected to a network for identification purposes. NDP messages are broadly categorized into five types and each message type carries out distinct tasks, these messages are: Router Solicitation (RS), Neighbour Solicitation (NS), Router Advertisement (RA), Neighbour Advertisement (NA), and Redirect. NDP security vulnerabilities is openness of a network of computer, wherein there exists a lack of trust among users. Typically, huge numbers of NDP messages can be used to flood a network, resulting in disconnecting of the connected devices. Due to the limitations of existing defence mechanisms, NDP are still prone to network-based attacks and these vulnerabilities must be considered while creating an IPv6 network. In this thesis, we present a novel detection method for DDoS and Replayed attacks that are launched using NDP in IPv6. This detection method is a stream-based network representation, instead of packet-based representation. The proposed detection method makes use of Locally Weighted Learning machine learning techniques, with three different algorithms as its based learner Bayesian network, Decision tree and Naïve Bayes. LWL-Bayesian Network model achieved the highest detection rate of 96.48%. LWL-Naïve Bayes model is the next best model, with an accuracy rate of 96.024%, while the LWL-Decision Tree model had the lowest overall detection rate of 93%. Comparatively, all developed IDSs are capable of detecting DDoS and Replayed attacks based on NDP-based network traffic as well as the detection of anomalies. They all demonstrated strong predictive ability, however, the LWL-Bayesian Network model proved to have the best overall performance to develop a locally weighted IDS model among the three models. In short, the development of the detection models, has strong predictive capabilities, with high accuracy rate, does not overfit, has low computational costs, and uses less time for model development and attack detection.

2 - IPv6 Multicasting

The United States (US) Department of Defense (DoD) has been tasked by the DoD chief information officer (DoD CIO) to transition its networks from Internet protocol (IP) version 4 (IPv4) to IP version 6 (IPv6) by fiscal year 2008 (FY08). This will be a daunting task and presents significant challenges to DoD network architects, engineers and operators. One of the most difficult challenges will be to ensure that sensitive DoD information is not compromised by the introduction of IPv6. Currently, DoD information assurance (IA) professionals are studying this problem and architecting solutions to mitigate these risks. In this paper, we present a notional security architecture for DoD networks transitioning to IPv6

Internet Protocol version 6 (IPv6) is a new generation protocol that is designed to solve the issues which arises in IPv4. The introduction of IPv6 may pose additional security risks and give potential vulnerabilities in addition to those which are provided by IPv4. This paper analyzes the security vulnerabilities exist, network security improvements and implementation, and the distributed security policy in the IPv6. Hence, several security policies should be created to maintain the security for both IPv4 and IPv6.

Internet Protocol Version 6 (IPv6) was developed in 1990 to overcome the shortage of IP Version 4 (IPv4) addresses. The world saw IP Version 6 as the next generation IP addressing and an innovative backbone for the Internet. Although more than twenty five years have passed since the development of IPv6, but still IPv6 is seen as new technology without drastic enhancements and has not been widely adopted. Even Information Technology giants fear the network transition to IPv6 backbone. This article analyses the reason for this resistance towards IPv6. A detailed study of the same has been conducted and is discussed in the paper. The discussion includes the myths and facts that has resulted to the IPv6 resistance and outlines the resolutions for IPv6 transitions.

The deployment of Internet Protocol version 6 (IPv6) has raised security concerns among the network administrators. Thus, in strengthening the network security, administrator requires an appropriate method to assess the possible risks that occur in their networks. Aware of the needs to calculate risk in IPv6 network, it is essential to an organization to have an equation that is flexible and consider the requirements of the network. However, the existing risk assessment equations do not consider the requirement of the network. Therefore, this paper presents the adaptation of grounded theory to search for elements that are needed to develop IPv6 risk assessment (IRA6) equation. The attack scenarios’ experiments; UDP Flooding, TCP Flooding and Multicast attacks were carried out in different network environment to show how the IPv6 risk assessment equation being used. The result shows that the IRA6 equation is more flexible to be used regardless the network sizes and easier to calculate the risk value compared to the existing risk assessment equations. Hence, network administrators can have a proper decision making and strategic planning for a robust network security.

The Internet protocol version 6 (IPv6) was designed with security in mind. However, from the survey of network security community, the No.1 risk today is the lack of IPv6 security knowledge. The coexistence of IPv4 and IPv6 supported by transition technology complicates the security management. Weak v6 security policies are a direct result of the current deficit in IPv6 security knowledge. To solve the problem, the IP Network Threat Ontology, and the Anti-threat Tools Ontology were proposed to collect and compare various network threats on IPv4 and IPv6. Thus, the ontology-based anti-threat decision support system can be developed to support the decision making of security policies.

The present internet version which was established and consolidated over internet protocol version 4 (IPV4) in 1981, and whose amount of public addresses available is insufficient to meet the demands explosion and current internet multimedia devices, services and application intensive environment has posed serious problems of incomplete web transactions. Stakeholders and communication industry in Nigeria are unwilling and feel reluctant to migrate to IPV6 because of inhibiting factors. This needs urgent redress to overcome the tractions that are responsible for apathy to migration from IPV4 to IPV6 launched in 1994 by the Internet Engineering Task Force (IETF). If nothing is done, sometime, internet may run out of space, ARIN [1]. Users may suffer disillusionment and frustration. The objective of this study therefore is to design a model for predicting migration from IPV4 to IPV6 in Nigeria by 2027 based on growth trend developed from statistical indices. The essence is to explore and analyze the factors that can encourage migration to IPV6 in the next 10 years and use those factors to forecast growth, so that IPV6 will receive boost in terms of growth and patronage. The study also aims at designing a predictive model that simulates the behaviour of the restrictive policies on migration to 1PV6 so as to ascertain the current impact on non-motivation and unwillingness to migrate to IPV6 in Nigeria. The motivation behind this study is to identify the inhibiting factors responsible for lack of motivation to migrate from IPV4 to IPV6 in Nigeria. The methodologies that were deployed in packaging the model include the statistical methodology, Structured Systems Analysis and Design Methodology (SSADM) and prototyping. The result is indeed functional software, programmed through Visual Basic. Net. (VB.Net) that can be used to simulate the behavioural impact of any government policy formulation for Telecommunication industry and stakeholders.

Hybridizing flower pollination algorithm with particle swarm optimization for enhancing the performance of IPv6 intrusion detection system