Search

RPL-Routing Protocol for Low-Power and Lossy Networks (usually pronounced "ripple")-is the de facto standard for IoT networks. However, it neglects to exploit IoT devices' full capacity to optimize their transmission power, mainly because it is quite challenging to do so in parallel with the routing strategy, given the dynamic nature of wireless links and the typically constrained resources of IoT devices. Adapting the transmission power requires dynamically assessing many parameters, such as the probability of packet collisions, energy consumption, the number of hops, and interference. This paper introduces Adaptive Control of Transmission Power for RPL (ACTOR) for the dynamic optimization of transmission power. ACTOR aims to improve throughput in dense networks by passively exploring different transmission power levels. The classic solutions of bandit theory, including the Upper Confidence Bound (UCB) and Discounted UCB, accelerate the convergence of the exploration and guarantee its optimality. ACTOR is also enhanced via mechanisms to blacklist undesirable transmission power levels and stabilize the topology of parent-child negotiations. The results of the experiments conducted on our 40-node, 12-node testbed demonstrate that ACTOR achieves a higher packet delivery ratio by almost 20%, reduces the transmission power of nodes by up to 10 dBm, and maintains a stable topology with significantly fewer parent switches compared to the standard RPL and the selected benchmarks. These findings are consistent with simulations conducted across 7 different scenarios, where improvements in end-to-end delay, packet delivery, and energy consumption were observed by up to 50%.

Service discovery is an essential component for distributed mobile applications in vehicular communication systems. While there have been numerous service discovery protocols, applications for vehicular communication systems pose additional requirements: discover services according to geographical position inside dynamic mobile environments. In this article, we propose a geographical location aware service discovery mechanism for vehicular ad-hoc networks (VANETs). The proposed mechanism exploits an IPv6 multicast service discovery protocol on IPv6 GeoNet-working specified by the GeoNet project. Thanks to the GeoBroadcast mechanism, it efficiently propagates service discovery messages to a subset of nodes inside a relevant geographical area with encapsulating IPv6 multicast packets. We implemented the proposed mechanism to the ns-3 network simulator, furthermore we integrated the prototype system using CarGeo6, an open source implementation of IPv6 GeoNetworking, with openSLP. Our simulation and real field evaluation results show the system can discover services with low latency and low bandwidth usage in VANETs even via multi-hop.

This work has developed a network toolkit inPython to automatically carry out several network attacks andsecurity vulnerability testing when operating IPv6. Specifically,the program can be used to launch specified practical typesof attacks according to the user’s direction such as DoS(Denial of Service), dumping servers, spoofing or bypassing thefirewall. The essence of these attacks is based on the inherentvulnerabilities of Extension headers, and protocols such asICMPv6 (Internet Control Message Protocol), DHCPv6 (DynamicHost Configuration) Protocol, which are the most importantprotocols in the IPv6 network operation. In addition, the analysisand illustrations have been presented, which can help networkanalysts to have a clearer understanding of the potential dangersthat could arise from implementation of IPv6. From there,they can propose appropriate solutions to eliminate or mitigatedamage when attacks occur.

This work has developed a network toolkit inPython to automatically carry out several network attacks andsecurity vulnerability testing when operating IPv6. Specifically,the program can be used to launch specified practical typesof attacks according to the user’s direction such as DoS(Denial of Service), dumping servers, spoofing or bypassing thefirewall. The essence of these attacks is based on the inherentvulnerabilities of Extension headers, and protocols such asICMPv6 (Internet Control Message Protocol), DHCPv6 (DynamicHost Configuration) Protocol, which are the most importantprotocols in the IPv6 network operation. In addition, the analysisand illustrations have been presented, which can help networkanalysts to have a clearer understanding of the potential dangersthat could arise from implementation of IPv6. From there,they can propose appropriate solutions to eliminate or mitigatedamage when attacks occur.

This work has developed a network toolkit inPython to automatically carry out several network attacks andsecurity vulnerability testing when operating IPv6. Specifically,the program can be used to launch specified practical typesof attacks according to the user’s direction such as DoS(Denial of Service), dumping servers, spoofing or bypassing thefirewall. The essence of these attacks is based on the inherentvulnerabilities of Extension headers, and protocols such asICMPv6 (Internet Control Message Protocol), DHCPv6 (DynamicHost Configuration) Protocol, which are the most importantprotocols in the IPv6 network operation. In addition, the analysisand illustrations have been presented, which can help networkanalysts to have a clearer understanding of the potential dangersthat could arise from implementation of IPv6. From there,they can propose appropriate solutions to eliminate or mitigatedamage when attacks occur.

This work has developed a network toolkit inPython to automatically carry out several network attacks andsecurity vulnerability testing when operating IPv6. Specifically,the program can be used to launch specified practical typesof attacks according to the user’s direction such as DoS(Denial of Service), dumping servers, spoofing or bypassing thefirewall. The essence of these attacks is based on the inherentvulnerabilities of Extension headers, and protocols such asICMPv6 (Internet Control Message Protocol), DHCPv6 (DynamicHost Configuration) Protocol, which are the most importantprotocols in the IPv6 network operation. In addition, the analysisand illustrations have been presented, which can help networkanalysts to have a clearer understanding of the potential dangersthat could arise from implementation of IPv6. From there,they can propose appropriate solutions to eliminate or mitigatedamage when attacks occur.

© 2023 Elsevier. This manuscript version is made available under the CC-BY-NC-ND 4.0 license http://creativecommons.org/licenses/by-nc-nd/4.0, A variety of wireless (and wired) technologies are being used to enable Internet of Things (IoT) device connectivity. Two examples of popular technologies in some crucial IoT domains (e.g., smart home, smart factories and smart cities, among others) are IEEE 802.15.4 and IEEE 802.11. However, IoT devices supporting different wireless technologies are not interoperable without a gateway. One solution to this problem is exploiting bidirectional Cross-Technology Communication with Wake-up Radio (WuR-CTC). Nevertheless, existing WuR-CTC approaches do not support IPv6, and therefore cannot offer full Internet protocol stack interoperability. For the first time to our knowledge, in this paper, we present the design, implementation and evaluation of an adaptation layer to provide IPv6 support over WuR-CTC, by leveraging the IETF Static Context Header Compression and fragmentation (SCHC) framework. Among others, experimental results show that our solution allows transferring a 127-byte IPv6 packet from an IEEE 802.15.4 device to an IEEE 802.11 device, without a gateway, in 69 ms (in average). Therefore, the designed solution supports latency-stringent applications in smart environments, where a human in the loop expects real-time interaction between devices., This work was supported in part by the Spanish Government through project TEC2016-79988-P funded by AEI/FSE/EU, Spain, and grant PID2019-106808RA-I00 funded by MCIN/AEI/10.13039/501100011033, Spain, and by Secretaria d’Universitats i Recerca del departament d’Empresa i Coneixement de la Generalitat de Catalunya, Spain with the grant number 2021 SGR 00330., Peer Reviewed, Postprint (published version)

Going wireless is one of the key industrial trends, which assists the emergence of new manufacturing and maintenance processes by reducing the complexity and cost of physical equipment. However, the adoption of Wireless Sensor Networks (WSNs) in production environments is limited due to the strict Quality of Service (QoS) requirements of industrial applications. In particular, Wireless Avionics Intra-Communication (WAIC) systems operating in 4.3 GHz band are designed for intra-aircraft use cases with considerable restrictions on the transmission power of sensors, which results in multi-hop topologies, complicating a guaranteed QoS. The Internet Engineering Task Force (IETF) has developed the protocol stack IPv6 over the Time Slotted Channel Hopping (TSCH) mode of IEEE 802.15.4 (6TiSCH) based on the IEEE 802.15.4 Standard for Low-Rate Wireless Networks, which combines the TSCH reliability with ubiquitous IPv6 connectivity and with the robust Routing Protocol for Low-Power and Lossy Networks (RPL). The Scheduling Function (SF) is a core IPv6 over the TSCH mode of IEEE 802.15.4 (6TiSCH) component, but the specification of the SF is an open research topic: numerous scientific articles investigated how QoS for a wide range of applications can be met by developing specialized SFs. However, no full-scale information exchange between the layers of the 6TiSCH stack was considered to optimize the SFs and to improve the network performance. In this work, we propose a novel solution named 6TiSCH-CLX to satisfy demanding QoS requirements using cross-layer communication. It is an extension of the 6TiSCH framework at the network and Medium Access Control (MAC) layers, addressing latency and reliability challenges agnostic of the physical layer. 6TiSCH-CLX is evaluated both analytically and in simulations for several safety-critical avionic intra-communication use cases in WAIC. Preliminary results indicate considerable improvements to latency, while maintaining almost 100% Packet

This thesis explores the use of blockchains along with the Internet Protocol version 6 (IPv6) data packet messages to support secure, high-performance, and scalable communication with an intelligent swarm of unmanned aerial vehicles (UAVs). For this thesis, we investigate the exchange of encrypted data packets for three scenarios, those being peer-to-peer, peer-to-many, and many-to-peer. We simulate the swarm’s behavior for each of these scenarios and vary the number of UAVs in a swarm over the simulation runs. The simulation-based results showed that for peer-to-peer scenarios and many-to-peer scenarios, there is no significant increase in latency even though in many-to-peer scenarios, the number of interacting nodes increases. In contrast, latency increases for the peer-to-many scenarios. Additional research needs to be performed to assess the security and scalability of the blockchain-IPv6 approach proposed in this thesis., Major, Indonesian Navy, Approved for public release. Distribution is unlimited.

IPv6 is being more and more adopted, in part to facilitate the millions of smart devices that have already been installed at home. Unfortunately, we find that the privacy of a substantial fraction of end-users is still at risk, despite the efforts by ISPs and electronic vendors to improve end-user security, e.g., by adopting prefix rotation and IPv6 privacy extensions. By analyzing passive data from a large ISP, we find that around 19% of end-users' privacy can be at risk. When we investigate the root causes, we notice that a single device at home that encodes its MAC address into the IPv6 address can be utilized as a tracking identifier for the entire end-user prefix-even if other devices use IPv6 privacy extensions. Our results show that IoT devices contribute the most to this privacy leakage and, to a lesser extent, personal computers and mobile devices. To our surprise, some of the most popular IoT manufacturers have not yet adopted privacy extensions that could otherwise mitigate this privacy risk. Finally, we show that third-party providers, e.g., hypergiants, can track up to 17% of subscriber lines in our study., Green Open Access added to TU Delft Institutional Repository ‘You share, we take care!’ – Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public., Cyber Security

IPv6 Segment Routing (SRv6) is a recent implementation of the source routing paradigm in IPv6 network. A programmability framework has recently been added to SRv6 and enables it to support diverse use-cases. We leverage this support to design, implement, and assess a Forward Erasure Correction (FEC) technique that transparently protects IPv6 packets. We implement our encoders and decoders using eBPF on the Linux kernel and evaluate the benefits that they bring with IoT devices.

© 2021 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works, The Internet Engineering Task Force (IETF) has standardized a new framework for IPv6 support over Low Power Wide Area Networks (LPWANs), called Static Context Header Compression and Fragmentation (SCHC). SCHC includes acknowledgment (ACK)-based mechanisms for reliable fragmented packet transmission. For the latter, SCHC defines a Receiver-Feedback Technique (RFT), called Compressed Bitmap (CB), by which a receiver reports to the sender whether the fragments carrying a packet have been received or not. Such information is carried as ACK payload. Considering the extraordinary frame size and message rate constraints of LPWANs, ACK payload size becomes crucial. In this paper, we compare the performance of CB with that of several alternative RFTs, namely List of Lost Fragments (LLF), List of Deltas (LoD), and Uncompressed Bitmap (UB), where the latter is used as a benchmark. We evaluate the considered RFTs in terms of ACK size, number of Layer 2 (L2) frames needed to carry an ACK, and ACK Time on Air. Our analysis shows that the use of RFTs different from CB offers significant performance improvement in many scenarios. Furthermore, we provide guidance on which RFT should be used for different packet sizes, error rates and error patterns., This research is funded in part by the ERDF and the Spanish Government through project TEC2016-79988-P and project PID2019-106808RA-I00, AEI/FEDER, EU., Peer Reviewed, Postprint (author's final draft)

ResumenEl objetivo principal de este proyecto se basó en determinar la influenciadel protocolo IPv6 con el uso de calidad de servicio en una red de área ampliaque conecta redes locales basadas en tecnología inalámbrica. Por consiguiente,se determinó la influencia de IPv6 respecto al rendimiento que ofrece en los extremos de una red de área amplia. Se utilizó una metodología propia basada en los lineamientos de Bisquerra (2000), contemplando cuatro (4) fases las cuales se dividen en: recopilación de información, diseño de topologías y/o ambientes de pruebas, pruebas de medición y recopilación de información de las pruebas anteriores y el tratamiento y análisis estadístico de los datos obtenidos. Los resultados obtenidos en el análisis comparativo entre los protocolos IPv6 e IPv4 y la calidad de servicio que cada uno ofrece, determinaron que IPv4 tiene un desempeño ligeramente superior a IPv6, pero por tratarse de diferencias no significativas, la implementación de la nueva versión IP no influye en el rendimiento de una red con las características estudiadas.AbstractThe main objective of this research was to determine the influence of theIPv6 protocol with the use of service quality in a wide area network (WAN) thatconnects local networks based on wireless technology. The influence of IPv6was determined according to the throughput offered at both ends of the WANlink. A methodology based on Bisquerra's (2000) guidelines was used, composedof four (4) phases: information collection, design of topologies and test environments, measuring tests and information collection from previous tests, and statistical treatment and analysis of obtained data. Results obtained in comparative analysis between the IPv6 and IPv4 protocols and the quality of service offered by each, determined that IPv4 had a slightly better performance than IPv6; however, since the differences were not significant,implementation of the new IP version does not influence the performance of a network with the

IP addresses of end hosts change when they are re-assigned. We apply survival analysis, which is commonly used in healthcare, on IP addresses to predict their assignment duration (their lifetime). We propose a survival parametric model based on a history of 6 years of address assignments on a worldwide scale. Our model outperforms alternative models both from short-term and long-term views. The custom modelling is also discussed as address assignment varies across Internet service providers (ISPs) and autonomous systems (ASs). A predictable address assignment duration has many applications, including source reputation, topology mapping, and geolocation. We describe a use-case in fraud prevention, where the proposed model is used as a trigger for two-factor authentication. The created dataset of addresses assignment durations is made publicly available.

IP addresses of end hosts change when they are re-assigned. We apply survival analysis, which is commonly used in healthcare, on IP addresses to predict their assignment duration (their lifetime). We propose a survival parametric model based on a history of 6 years of address assignments on a worldwide scale. Our model outperforms alternative models both from short-term and long-term views. The custom modelling is also discussed as address assignment varies across Internet service providers (ISPs) and autonomous systems (ASs). A predictable address assignment duration has many applications, including source reputation, topology mapping, and geolocation. We describe a use-case in fraud prevention, where the proposed model is used as a trigger for two-factor authentication. The created dataset of addresses assignment durations is made publicly available.

IP addresses of end hosts change when they are re-assigned. We apply survival analysis, which is commonly used in healthcare, on IP addresses to predict their assignment duration (their lifetime). We propose a survival parametric model based on a history of 6 years of address assignments on a worldwide scale. Our model outperforms alternative models both from short-term and long-term views. The custom modelling is also discussed as address assignment varies across Internet service providers (ISPs) and autonomous systems (ASs). A predictable address assignment duration has many applications, including source reputation, topology mapping, and geolocation. We describe a use-case in fraud prevention, where the proposed model is used as a trigger for two-factor authentication. The created dataset of addresses assignment durations is made publicly available.

The paper focuses on design, background and experimental results of real environment of DDoS attacks. The experimental testbed is based on employment of a tool for IT automation to perform DDoS attacks under monitoring. DDoS attacks are still serious threat in both IPv4 and IPv6 networks and creation of simple tool to test the network for DDoS attack and to allow evaluation of vulnerabilities and DDoS countermeasures of the networks is necessary. In proposed testbed, Ansible orchestration tool is employed to perform and coordinate DDoS attacks. Ansible is a powerful tool and simplifies the implementation of the test environment. Moreover, no special hardware is required for the attacks execution, the testbed uses existing infrastructure in an organization. The case study of implementation of this environment shows straightforwardness to create a testbed comparable with a botnet with ten thousand bots. Furthermore, the experimental results demonstrate the potential of the proposed environment and present the impact of the attacks on particular target servers in IPv4 and IPv6 networks.

Cílem této práce je vytvoření podkladového materiálu pro úvod do problematiky počítačových sítí. Práce je rozdělena do tří teoretických částí. První část se zabývá historií a vývojem počítačových sítí. Vysvětluje rozdíl mezi ISO/OSI modelem a TCP/IP architekturou. Druhá část je zaměřena na adresaci a směrování. Popisuje protokoly IPv4 a IPv6 a základy směrovacích protokolů RIP, IGRP, EIGRP a OSPF. Třetí část se zabývá pasivními a aktivními prvky sítě., The aim of this bachelor's thesis is to create background material for an introduction to computer networks. The work is divided into three theoretical parts. The first part deals with the history and development of computer networks. Explains the difference between the ISO / OSI model and the TCP / IP architecture. The second part is focused on addressing and routing. Describes IPv4 and IPv6 protocols and the basics of RIP, IGRP, EIGRP, and OSPF routing protocols. The third part deals with passive and active network elements., Dopravní fakulta Jana Pernera, Student prezentoval ve vymezeném čase svoji práci, reagoval na připomínky uvedené v posudcích vedoucího a oponenta bakalářské práce, zodpověděl dotazy členů komise., Dokončená práce s úspěšnou obhajobou

It has previously been assumed that the size of anIPv6 network would make it impossible to scan the network forvulnerable hosts. Recent work has shown this to be false, andseveral methods for scanning IPv6 networks have been suggested.However, most of these are based on external information likeDNS, or pattern inference which requires large amounts of knownIP addresses. In this paper, DeHCP, a novel approach based ondelimiting IP ranges with closely clustered hosts, is presentedand compared to three previously known scanning methods. Themethod is shown to work in an experimental setting with resultscomparable to that of the previously suggested methods, and isalso shown to have the advantage of not being limited to a specificprotocol or probing method. Finally we show that the scan canbe executed across multiple VLANs., open access

The Domain Name System, DNS, is a fundamental part in the usability of the Internet, but its caching function is challenged by the increase of address size, number of addresses and automation. Meanwhile, there are limits in the memory capacity of certain devices at the Internet’s edge towards the Internet of Things. This study has taken a closer look at concurrent needs of DNS resolution and considered how DNS is affected by IPv6 address propagation, mobile devices, content delivery networks and web browser functions. The investigation has, in two freely available DNS resolver implementations, searched for the optimal cache memory management in constrained devices on, or at the border of, the Internet of Things. By means of open source access to the programs, Unbound and PowerDNS Recursor, each of their structures have been interpreted in order to approximate and compare memory requirements. Afterwards a laboratory simulation has been made using fictitious DNS data with real-world characteristics to measure the actual memory consumption at the server process. The simulation avoided individual adaption of program settings, involvement of DNSSEC data and imposing memory constraints on the test environment. The source code analysis estimated that Unbound handled A+AAAA records more optimally while PowerDNS Recursor was more efficient for PTR records. When using both record types as a whole the measurements in the simulation showed that Unbound was able to store DNS data more densely than PowerDNS Recursor. The result has shown that the standardized wireformat for DNS data used in Unbound is less optimal than the object-based of PowerDNS Recursor. On the other hand, the study showed that Unbound which was procedurally written in the C language was able to manage the cache more sparingly than the object- oriented PowerDNS Recursor which was developed in C++., Domännamnsystemet, DNS, utgör en fundamental del av användbarheten för Internet, men dess cachefunktion utmanas av adressers ökande storlek, antal och automatisering. Parallellt råder begränsad minneskapacitet hos vissa enheter i Internets utkant mot Internet of Things. Studien har tittat närmare på nutida behov av namnuppslagning och har då betraktat hur DNS påverkats av IPv6- adressutbredning, mobila enheter, innehållsleveransnätverk och webbläsarfunktioner. Undersökningen har i två fritt tillgängliga serverprogramvaror för DNS-uppslag sökt efter den optimala hanteringen av cache hos begränsade enheter i, eller på gränsen till, Sakernas Internet. Med hjälp av tillgången till öppen källkod för programmen, Unbound och PowerDNS Recursor, har dess respektive strukturer tolkats för att uppskatta och jämföra minnesbehov. Därefter har en simulering gjorts i en laborativ miljö med fiktiva DNS-data av verklighetstrogen karaktär för att mäta den faktiska förbrukningen av minne på DNS-serverns process. Vid simuleringen undveks att individuellt anpassa programmens inställningar, att blanda in data för DNSSEC, samt att införa minnesbegränsningar i testmiljön. Undersökningen av källkod beräknade att Unbound var mer optimalt för posttyperna A+AAAA medan PowerDNS Recursor var effektivare för posttypen PTR. För båda posttyperna som helhet visade mätningarna i simuleringen att Unbound kunde lagra DNS-data tätare än PowerDNS Recursor. Resultatet har visat att det standardiserade meddelandeformatet för DNS-data som används i Unbound är mindre optimalt än det objektbaserade i PowerDNS Recursor. Å andra sidan visades att Unbound som var procedurellt skrivet i programspråket C lyckades hushålla med cacheminnet bättre än det objektorienterade PowerDNS Recursor som utvecklats i C++.

In this study, a analysis was performed to analyze why there are differences in port configuration between IPv4 and IPv6. For this, the current state of adoption and implantation processes of IPv6 were researched. Currently, 4,8% of all dual-stack hosts have a different configuration in open ports on IPv4 and IPv6. To discover the reasoning behind these differences, thirteen interviews were performed with owners of presumed misconfiguration or network security experts. Discovered was that most of the configurations were unintentional and because of unawareness and adequate knowledge of IPv6. Furthermore, an analyzes was performed about the reasons behind the lack of knowledge and awareness and discovered that at the moment, there is no compelling reason to migrate from IPv4 to IPv6 in most western countries. The lack of knowledge and awareness could be a reason why there is a 4,8% difference in IPv4, IPv6 configuration. Furthermore, noticed was that there is no clear solution to the problem and that there is no central actor that can solve this problem.

Cyberspace is vital to the application of joint military operations, to the advancement of economic growth, and to the enhancement of day-to-day life. As such, its defense is critical, yet its defense is also difficult, largely due to malicious actor persistence and weaknesses inherited from the cyber domain's initial development. This research proposes and tests an extension to a network tarpit, Greasy, a cyberspace defense tool, enabling reduced state requirements, adding new tarpit behavior, and maintaining its deception capability in both Internet Protocol version 4 and Internet Protocol version 6 environments. These modifications are hypothesized to enable Greasy's operation at scale in the much larger address space of Internet Protocol version 6, thereby sustaining its relevance for years to come. The results also support an improvement in Greasy's overall capabilities. Greasy is effective at slowing network reconnaissance attempts and using a deception scheme that alters the responsive areas of networks on which it is operating. Based on the findings, continued development of the tool to refine it for deployment in defensive cyberspace operations is recommended., http://archive.org/details/scalingnetworkta1094561393, Lieutenant, United States Navy, Approved for public release; distribution is unlimited.

This project reassesses and expands on a simple fingerprinting method for Internet Protocol version 4 (IPv4) routers, and extends that methodology to Internet Protocol version 6 (IPv6) routers. The initial methodology, developed by Vanaubel, Pansiot, Merindol, and Donnet, utilized initial time to live (iTTL) values derived from Internet Control Message Protocol (ICMP) echo-reply and TTL exceeded messages. The current project used ICMP echo-reply and destination unreachable/port unreachable, combined with a third iTTL value derived from ICMP timestamp messages, to strengthen the fingerprint. We adapted the methodology to IPv6-enabled routers using the initial hop limit (iHL) values from ICMPv6 echo-reply and destination unreachable/port unreachable messages. The main goal of this project is to develop a simple fingerprinting technique to identify IPv4 and IPv6 router platforms. We were able to successfully expand the previously developed IPv4 router fingerprint using the ICMP timestamp reply message. Using this fingerprinting methodology, Juniper routers can be identified. However, this fingerprinting technique cannot distinguish between Cisco and Huawei routers. With IPv6, it became evident that most routing devices follow the recommended iHL value of 64 (RFC 1700). Thus, our methodology cannot distinguish between IPv6 routing devices. We recommend additional analysis of Cisco and Huawei devices running IPv4 to identify differences in activity, as well as further research into IPv6 routers., http://archive.org/details/fingerprintingip1094563434, Chief Petty Officer, United States Navy, Chief Petty Officer, United States Navy, Approved for public release; distribution is unlimited.

Esta investigación tuvo como objetivo principal determinar el rendimiento de la transmisión de VoIP bajo IPv6 (y su comparación con IPv4), implementando Frame Relay como protocolo WAN de la capa de enlace de datos. Se utilizó un diseño experimental para crear el ambiente de prueba, variando la transmisión de flujos combinados de data, video y voz para medir el impacto en la red, tomando como referencia la metodología de Bisquerra (2004) que incluye el análisis, diseño y ambiente de pruebas, implementación, recolección de datos y análisis estadístico. Entre las conclusiones más relevantes se obtuvo que IPv6 presenta un mejor rendimiento que IPv4 en relación al retardo (Delay) de los flujos estudiados así como también en los tipos de tráfico, salvo en los casos en que la red se encontraba saturada. Estadísticamente, puede concluirse que Frame Relay, en IPv6, ofrece un rendimiento altamente aceptable en la transmisión de voz y video.

Segment Routing is a modern variant of source routing that is being gradually deployed by network operators. Large ISPs use it for traffic engineering and fast reroute purposes. Its IPv6 dataplane, named SRv6, goes beyond the initial MPLS dataplane, notably by enabling network programmability. With SRv6, it becomes possible to define transparent network functions on routers and endhosts. These functions are mapped to IPv6 addresses and their execution is scheduled by segments placed in the forwarded packets. We have recently extended the Linux SRv6 implementation to enable the execution of specific eBPF code upon reception of an SRv6 packet containing local segments. eBPF is a virtual machine that is included in the Linux kernel. We leverage this new feature of Linux 4.18 to propose and implement flexible eBPF-based fast-reroute and failure detection schemes. Our lab measurements confirm that they provide good performance and enable faster failure detections than existing BFD implementations on Linux routers and servers.

It has been suggested that some cryptocurrencies have potential to take the role as a global digital payment system. However, as the current technology stands, all cryptocurrencies have shortcomings which are growing when scaling parameters. This emphasizes the importance of fast and reliable data transmissions when implementing network protocols to handle the transactions. However, little research has been conducted to specifically support the development of cryptocurrencies regarding protocol performance comparison. This study will be assisting the development of a new cryptocurrency, proposed by HAJ Enterprise. The report uses a theoretical framework of economic perspectives to investigate if the proposed cryptocurrency could take the role as a form of good money. Furthermore, the main purpose of the study is to identify which existing transport protocol with appurtenant parameters would be the most suitable in an implementation of the proposed cryptocurrency. To answer these questions, the study measures latency, throughput and reliability of protocols in a test simulating a real case of long distance data transmission. These results are then compared to findings from similar studies. From the results, it was suggested that proposed cryptocurrency satisfies the requirements of good money, as intrinsic value was found through the monetary policy. Moreover, it was found that TCP IPv6 showed the best performance regarding data transmission. However, considering the current state of the IPv6 adoption rate into consideration, it is suggested that TCP IPv4 with a packet size in the range of 1024-2048 would be beneficial. Further research in different settings is required for more nuanced results., Det har föreslagits att kryptovalutor har potential att fungera som ett globalt digitalt betalmedel. Den bakomliggande tekniken medför dock att alla kryptovalutor har brister. Dessa brister är växande när parametrar skalas upp. Detta understryker vikten av snabba och pålitliga överföringar av data och passande val vid implementering av protokoll för att hantera transaktionerna. Forskning inom området för effektiv dataöverföring inom kryptovalutor tillåter fler möjligheter i betraktande av lösningar till storskaliga nätverk. Dessvärre har en begränsad mängd forskning bedrivits som specifikt understödjer utvecklingen av kryptovalutor genom jämförelse av protokollprestanda. Denna studie medverkar i utvecklingen av en ny kryptovaluta, föreslagen av HAJ Enterprise. Rapporten använder ett teoretiskt ramverk av ekonomiska perspektiv på kryptovalutor för att undersöka om den föreslagna kryptovalutan kan klassas som good money. Vidare är det huvudsakliga syftet med studien att identifiera vilka befintliga transportprotokoll, med tillhörande parametrar, som skulle vara mest lämpade att implementera i den föreslagna kryptovalutan. För att besvara dessa frågor mäts fördröjning, genomströmning och tillförlitlighet av protokoll i en testmiljö som simulerar ett verkligt fall med dataöverföring mellan långa avstånd. Dessa resultat jämförs därefter med resultat från liknande studier. Från resultaten kunde rapporten visa att den föreslagna kryptovalutan kan klassificeras som en form av pengar, då inneboende värde kunde identifieras genom kryptovalutans monetära policy. Det var också visat att TCP IPv6 hade bäst prestanda gällande dataöverföring. Men med hänsyn till den globala etablering av IPv6 föreslås TCP IPv4 med en paketstorlek inom en räckvidd mellan 1024 till 2048 byte som mest fördelaktig. Fortsatt forskning inom området och utökade tester inom olika miljöer krävs för ett mer nyanserat resultat.

Today the internet is a world wide web connecting billions of devices. All these devices need an IP-address to be able to communicate with one another. With the current version of the internet protocol, IPv4, the address space is limited. To solve this problem a transition to the latest version, IPv6, has begun. But the transition is going slowly partly because of a temporary solution called NAT, Network Addressing Translation. With the help of interviews with highly appointed employees from large IT companies in Sweden, this study examines the impact of factors other than NAT that are affecting the speed of the transition, and why a technically advanced country like Sweden is so far behind in this process. The results show that the demand of the consumers is not high enough and that cost versus incentives is not balanced well enough for a transition to go quicker. But in time the speed will increase and further research could perhaps help the speed of the transition grow., Idag är internet världsomspännande och miljarder av enheter är uppkopplade. Alla dessa enheter behöver en IP-adress för att kommunicera med varandra. Med den nuvarande versionen av internetprotokollet, IPv4, är adressrymden begränsad. För att lösa detta problem har en övergång till den senaste versionen, IPv6, påbörjats. Övergången går dock långsamt bland annat på grund av en temporär lösning kallad NAT, Network Addressing Translation. Med hjälp av intervjuer med högt uppsatta anställda på IT-företag i Sverige undersöker denna studie faktorer utöver NAT som påverkar hastigheten för övergången, och varför ett tekniskt avancerat land som Sverige ligger så långt efter med sin övergångsprocess. Resultaten visar att efterfrågan hos konsumenter inte är hög nog och att kostnad kontra incitament inte är tillräckligt välbalanserat för att övergången ska gå fortare. Med tiden kommer dock hastigheten att öka och vidare forskning skulle kunna hjälpa till att öka hastigheten för övergången ytterligare.

According to its creators, ICN is designed to fit the way we use the internet better than IP currently does. The use of named data and distributed network layer caching may provide a more efficient utilization of network resources due to the stateful forwarding plane which allows data to be retrieved from caches close by the requester, while also providing a higher content delivery performance in terms of content retrieval delay. Since the IoT is expected to connect billions of devices to the internet, a resource-efficient network paradigm is needed to cope with the corresponding enormous traffic increase. IoT deployments also typically follow a distributed data generation and retrieval paradigm, which could benefit from ICN’s in-network caching approach and stateful forwarding logic. This thesis focuses on assessing whether ICN is advantageous for the IoT in these aspects, by comparing an ICN approach to an IP approach for IoT applications., Electrical Engineering | Network Architectures and Services

En aquest projecte s'escolleix i estableix un sistema software capaç d'assignar adreces IP amb una seguretat acceptable, comprovant quins problemes sorgeixen en la seguretat i quins són evitables partint d'eines actuals que desenvolupen la mateixa tasca. Per realitzar aquest treball utilitzarem IOTA., En este proyecto se escoge y establece un sistema software capaz de asignar direcciones IP con una seguridad aceptable, comprobando qué problemas surgen en la seguridad y cuales son evitables partiendo de las herramientas actuales que desarrollan la misma tarea. Para hacer este trabajo usaremos IOTA.

Diese Arbiet untersucht verschiedene Implementierungsstrategien für den Weiterleitungsaspekt des 6LoWPAN protocols für „low power and lossy networks“ (LLNs). Die Leistungsfähigkeit in Hinblick auf Latenz und Zuverlässigkeit wird für das LLN-typische Datensammlung- Verkehrsmuster für direkte und reassemblierende Strategien untersucht. Ein neuartiger Ansatz basierend auf Lauschen und dem Aussetzen von Transmissionen wird entwickelt und es wird gezeigt, dass dieser die Ende-zu-Ende-Zuverlässigkeit in einem Großteil der untersuchten Simulationsszenarien und Testnetzwerken signifikant verbessert., This dissertation explores different implementation strategies for the fragment-forwarding aspect of the 6LoWPAN protocol for “low power and lossy networks” (LLNs). The performance in terms of latency and reliability for the LLN-typical collection traffic pattern is analyzed for several “direct” and “reassembling” strategies. A novel approach based on snooping and suspending transmissions is developed and it is shown that this approach improves the end-to-reliability significantly in most of the evaluated simulation and testbed scenarios.

Svenska Kyrkan i Norrköping upplever idag att de har ett virtuellt intranät som skulle kunna fungera bättre. Problematiken tycker de ligger i underliga trafikflöden, utarmning av IP-adresser och hög komplexitet. Därtill undrar de om det inte är hög tid att höja bandbredden ut från flera av byggnaderna. Min målsättning med arbetet är att utifrån de största församlingarna samt Kyrkans Hus – där organisationens IT-kontor och serverfarm är belägna – kunna ge rekommendationer på åtgärder och förändringar som ska kunna avhjälpa denna problematik och förhoppningsvis framtidssäkra några av dessa aspekter. Under mitt arbete har jag tagit ut rudimentära baselinemätningar, IP-adresseringstabeller och sammanställningar av trafikflöden i syfte att skapa en nulägesanalys. Jag har också ämnat illustrera den problematik som låg till grund för arbetets utformning. I min rapport har jag också behandlat moderna IT-trender såsom tunna klienter, virtualiseringsmiljöer och BYOD, Bring Your Own Device. Detta arbete har resulterat i ett generellt designförslag med redundanslänkar, gästnätverk och stöd för Ipv6 med olika alternativ inom samtliga aspekter, vilka kan användas för att skräddarsy implementeringen av de olika teknologierna. För en mer allomfattande, grundlig och slutgiltig design av intranätet som helhet skulle en mer omfattande dokumentation behövas, tillsammans med uppskattning av nätverksanvändning, IP-adressering samt budgetering., The Church of Sweden in Norrköping are currently faced with a virtual intranet that they feel could be improved. Some of the problems they have identified are unusual traffic forwardin patterns, exhaustion of the IP adress pool and a high level of complexity. In addition, they feel that it might be time to increase the bandwidth that some of the buildings have access to. My goal with this paper – based on the largest parishes and Kyrkan Hus, where the organization’s IT office and server farm lies – is to give recommendations in terms of actions and changes that could mitigate these issues and hopefully provide a more future proof solution. During my work I have taken some rudimentary baseline readings, IP addressing tables and compilations of network flows, in order to create a current situation analysis, which I have used to draw some of my conclusions. I have also aimed to illustrate the problems that have formed the foundation for this work. In my report I have also discussed some modern IT trends, such as thin clients, virtual environments and BYOD, Bring Your Own Device. This assignment has resulted in a general design proposal with redundant links, guest networks and Ipv6 support, with different alternatives withing each aspect, which can be used to further tailor the implementations of the different technologies. For a more all encompassing, thorough design of the intranet as a whole we’d need a more complete documentation, together with approximations and evaluations regarding network usage, IP addressing and budget.

This thesis assess the security of IPv6 in network of Hoan My Company, which mainly base on IPv4. Network infrastructure comprise network devices, computers machine, servers and other peripheral devices connected with each other. All of them communicate with each other by IPv4 protocol. However, with the development of Next Generation Internet and internet capable devices, venders now enable IPv6 default and work compatible with IPv4. Company network security does not aware about the risks and vulnerabilities from IPv6. Base on the research and assessment network infrastructure of company, it is clearly that enabling the IPv6 by default would make the network vulnerable. Router advertisement flooding attack could make performance of computer increase exponentially and slow down. TCP half-open flood sync, which is an old style of attack since IPv4, also cause performance problem on the target computer. Assessment also test the case when IPv6 enable for purpose, the test show that other attack style could be exploit same as IPv4 such as man in the middle attack, duplication address attack, spoof DHCPv6 or even perform the Cisco access control list evasion by exploit the complexity of extension header chain in IPv6. From that, the network of company have to deploy the mitigation to reduce the threat of IPv6 vulnerabilities. Company could takes the advantages from active directory and deploy Network Access Control with dot1x for limit the attacker from outside. On the other hand, using the IPv6 Access Control List is also good solution to mitigate the attacks. IPv6 transition should be considered as plan to migrate IPv4 network to IPv6. There are many techniques that support transition from IPv4 to IPv6 such as tunneling and NAT64. The security of after implement IPv6 must also consider properly because protocol like tunneling technique could be exploit such as routing loop with ISATAP router. Before migration company network to IPv6, company should plan and test in adv

The aim of this thesis is to analyze the performance of the VoIP using IPv4 and IPv6 with the help of the simulation software OMNeT++. Voice over IP (VoIP) technology is beneficial combination of the old Public Switched Telephone Network (PSTN) and the modern Internet Protocol (IP), which has a potential to rework the world’s phone system. Recently, VoIP has played an important role in communication via the Internet infrastructures and continuously evolved. To achieve the current success, VoIP technology has big support from other developed technologies such as Session Initiation Protocol (SIP), Dynamic Host Configuration Protocol (DHCP) and Internet infrastructure. Nowadays, the upgrade of the Internet infrastructure from IPv4 to IPv6 requires an adaption of VoIP technology. The thesis has two major objectives. The first one is to study the infrastructure of VoIP technology and its components, including DHCP, SIP, IPv4 and IPv6. The second objective is to set up a complete VoIP network model with the help of simulation program OMNeT++ for evaluation the performances of VoIP using IPv4 and IPv6. The performances are analyzed and compared between two versions of IP network in order to see how much each version suits VoIP technology.

This thesis will examine the plausibility of exchanging protocol from a normal server-client to a peer-to-peer solution for over-the-air updates, using a single case study for Sony Mobile Communications AB in Lund, Sweden. It will examine the effort, the risks, and what the actual gain may be comparing to a client-server approach for over-the-air software updates. Sony Mobile today uses a content delivery network which creates a peak upon new releases of software and this thesis will examine how efficient the peer-to-peer approach is for flash crowds in terms of saved data from the content delivery network. Continuing on the problem there are several global network infrastructure limitations, such as NAT44, NAT444 and firewalls, which proves to decrease the overall connectability of peers in peer-topeer networks. Live experiments using real mobile devices from Sony Mobile will be used to examine the gain after a comprehensive literature study to explore what impact such network limitations has on peer-to-peer networks. As a consequence showing that even with limitations there is a potential gain of changing the approach to a peer-to-peer model. The live experiments prove that with few steps there can be a potential data saving gain up to 20%, without any interference with the global infrastructure. The findings will also prove the feasibility of additional hole punching techniques which may further push the gain towards higher numbers., As from ancient history, sharing a burden have always ensured that a task can be completed much quicker than doing it entirely by yourself. Columbus would not have made it to the West Indies without the help of his crew, and the same applies for over-the-air software updates to actively reduce data flow from a server, and by doing so reducing costs by up to 40%! Peer-to-peer, a solution which can be easily described with a pub environment, where all the pub-people speak out and everyone listens at the same time. Information is shared to all without a central entity in between. Over-the-air software updates are spread globally whenever a mobile receives a fresh version of the operating system. This is usually followed by a craving of having the latest by the end-user which results in a flash crowds. Flash crowds, as a phenomenon, resembles ants going after sugar. This flash crowd puts a normal server structure under a lot of strain. It is as well costly as all the downloads must be paid for by the manufacturer. By distributing the effort to the mobile devices themselves, the data flow reduces by 17%, which actively translates to a cost reduction of the same magnitude. This is just by changing the way of communication, from a monologue to a dialogue for the mobiles. However, there are some drawbacks. In the global Internet, public IP-addresses are being used in extent and to many devices are today connected. Consequently, now even IP-addresses are shared among many devices. Returning to the pub scenario, imagine that you need to talk to a stranger which has your hat, because you throw it in the air when your favorite song came on. However, to reach this stranger you must firstly pass a bouncer, as the stranger is within a restricted area (private network). The bouncer acts as a network address translator (NAT) and tells you whether you may pass or not, if you know this stranger you can tell the bouncer this and he will let you through. If you do not, then you will be

The Internet of Things is the biggest challenge and opportunity for the Internet today. An application of the IoT is a home automation system. The idea consists of IP-enabled embedded devices connected to the Internet using IPv6. The IETF added to this idea by defining 6LoWPAN as a technique to apply IPv6 to IEEE 802.15.4, a low-power wireless network standard. The existing home automation wireless technologies and products in the market do not meet the requirements of low power, resilience, IP-based, security and friendly use. With the goal of advance in this direction Thread is a simplified, IPv6-based mesh networking protocol developed for efficient communication between devices around the home. It connects to the internet and provides simple yet robust interface to the cloud. Thread stack is royalty-free but closed-documentation (payment). With the aim to make broadly available this to developers sharing their know-how, Nest released an open-source implementation of Thread protocol named OpenThread on May 2016 to make the technology used in its products available and accelerate the development of new devices for the connected home.The objective of the present study is to analyze this brand new coming technology, focusing on the released implementation and make some tests in a real platform describing where possible the routing details. The goal of the implementation phase is to have a working bench ready to test and validate some of the Thread functionalities specially the routing parameters and changes of topology. The implementation phase has been done using a hardware testbed. We address the configuration of the test scenario on both hardware and software levels. This allow us to develop some tests such as the basic connectivity between devices, checking the visibility of the nodes and the revision of the routing tables. Finally, through different captures, we will analyze the behavior after some changes of scenario. Performing these tests was very complex du

The paper describes the basic principles of security design in network solutions based on Smart Grids in the IPv6 standard environment. The motivation for this research is described in the introduction. The second part describes the problem and the definition of basic characteristics of the environment, where the problem is to be solved. The solution is designed in the third part, when the similarities with IPv4 solutions are used as the basics of the proposed design. After the short discussion, there is the conclusion and planned future work in the last part., Příspěvek popisuje základní principy návrhu zabezpečení v síťových řešeních založených na technologii Smart Grids v prostředí standardu IPv6. V úvodu je popsána motivace k tomuto výzkumu, následuje popis problému a definice základních charakteristik prostředí, v němž je problém řešen. Řešení je navrhováno ve třetí části, přičemž jsou využity podobnosti s řešením pro IPv4 jako základ pro návrh. Po krátké diskusi následuje shrnutí v poslední části, kde jsou uvedeny i plánované směry dalšího výzkumu.

Tento kurz je úvodem do problematiky internetu vecí (IoT – Internet of Things). V prvních kapitolách najdete základní informace týkající se IoT. Následuje prehled nejduležitejších vlastností protokolu, který se v oblasti IoT nejcasteji používá, dále pak hlavních aplikací, soucasného stavu na trhu a technologií, které samotnou existenci IoT umožnují. Záver je venován nejduležitejším problémum, které bude treba rešit v blízké budoucnosti., Peer Reviewed, Postprint (published version)

In recent years, the number of devices connected to Internet has increased exponentially and in fact, it is estimated that the demand keep on increasing. When IPv4 protocol was introduced, this evolution was not expected. Over the years several limitations have arosen, including scalability and the unsustainable growth of the Internet routing table. In the late 90s, IPv6 protocol was defined to solve these issues and add new features. Currently, the Centre Tecnològic de Telecomunicacions de Catalunya (CTTC) has been forced to propose IPv6 deployment on its network mainly caused by the IPv4 address depletion, the increasing demand for devices connectivity and the need to support IPv6. RedIris and CSUC are encouraging and supporting the affiliated institutions like CTTC to deploy IPv6. This project is carried out by the IT department of CTTC, the Centre de Serveis Informàtics (CSI). The purpose of this project is, on the one hand, to analyse and acknowlege the main features of IPv6 protocol and show the differences with IPv4. It also aims to implement native IPv6 network in CTTC. On the other hand, the CTTC needs to give support with IPv6 in some basic services like DNS and web services. Finally, it is thought to compare IPv6 and IPv4 performance on the CTTC network. We analysed the network equipment and the network topology before proposing an IPv6 compatible solution. This causes the replacement of some network equipment. To gradually integrate IPv6 in the CTTC network we have chosen the dual-stack deployment. IPv6 is deployed in parallel with IPv4 on all infrastructure and services. We are adapting the DNS and the website service to IPv6 requests. In this project we are measuring the performance of IPv6 versus IPv4. We are running some tests to evaluate the performance through the calculation of the Round-Trip Time (RTT), throughput and Time To First Byte (TTFB) parameters. The results of the performance tests in the CTTC network are not showing important differenc

As the Internet of Things is gaining momentum, low-power communication technologies proliferate. In this paper, we focus on Bluetooth Low Energy (BLE) and IEEE 802.15.4 (CSMA, Low-power listening, and TSCH), and advocate low-power IPv6 for interoperability between the two. We perform a thorough experimental comparison of their link-layer performance, both in idle radio environment and when facing heavy (controlled) external interference. Our results suggest that both technologies can achieve interesting and complementary latency-energy trade-offs. Based on our results, we discuss possible interoperability between BLE and IEEE 802.15.4 and present related open issues.

[EN] Because of the growth of the number of devices that use the internet, the number of available IPv4 addresses has run out in most parts of the world. IPv6 was created to solve this problem but the migration progress is proceeding at a slower pace that it was expected. This is mostly due to the cost of changing the equipment to one that supports IPv6 and the cost of configuring these devices. Knowing the aspects of a router configuration that are affected by the performance of IPv6 is very important in order to improve the efficiency of IPv6 end facilitate the migration process. In this paper we perform several measures to detect which aspects of the configuration of a bottom and medium range router are affected by IPv6. Two different topologies were used and different combinations of IPv4 and IPv6 traffic are sent. In different test Access Control Lists or IPv6 Routing Extension Headers are used. CPU usage and maxim traffic rate are some evaluated parameters. The router performance is clearly affected by the IPv6 traffic is used, CPU usage increases and the maximum traffic rate decreases.

När det stod klart att antalet adresser i ipv4 inte skulle räcka, togs ipv6 fram. Med nya funktioner som hade anpassats till den infrastruktur som hade byggts upp världen runt så fanns det nu en ersättare till ipv4. Men skillnaderna är stora och protokollen är i sig inte lika varandra alls, framför allt inte när man tittar på inbygda funktioner. En av dessa nya funktioner i ipv6 är det som kallas för Prefix delegation, ett enkelt och smidigt sätt att per automatik dela ut delar av ett större nät till mindre nät. Även om det finns enkla och smidiga sätt att genomföra detta på så är inte all infrastuktur så enkel. Det gör att denna typ av funktioner kommer varvas med routes, både statiska och dynamiska. För att få en förståelse för hur detta kan skilja sig åt har vi tittat på en översikt av hur infrastrukturen kan se ut och sedan testat hur man skulle kunna lösa adresseringen genom en automatiserad process och en statisk process. Resultatet visar att den automatiserade lösningen kräver lite mer förarbete och specificerad utrustning, men att arbetet därefter blir lätt att kontrollera, felsöka och dokumentera. Den statiska processen är mer rakt på sak och kräver ingen speciell utrustning, däremot kommer det bli svårt att kontrollera, felsöka och dokumentera då minsta förändring kan kräva mycket arbete där risken för komplikationer är stor., When it became clear that the number of ipv4 addresses would not be enough, ipv6 was developed. With new features that had been adapted to the infrastructure that had been built up around the world, there was now a replacement for ipv4. But the differences are many and the protocols are not alike at all, especially when looking at the built-in functions. One of these new features in ipv6 is called Prefix Delegation, a simple and convenient way to automatically distribute parts of a larger network into smaller networks. Although there are simple and flexible way to implement this, the existing infrastructure of the Internet may not be so simple. The complexity of the infrastructure forces us to use a variety of routes, both static and dynamic. To get an understanding of how this can differ, we looked at an overview of how the infrastructure might look like and then tested how to solve the addressing through an automated process and a static process. The results shows that the automated solution requires a little more preparation and specified equipment, but the work then becomes easy to control, debug, and document. The static process is more straightforward and requires no special equipment, however, it will be difficult to control, debug, and document where the slightest change can require a lot of work where the risk of complications is great.

IPv4-adresser är begränsat när det gäller antalet det finns att dela ut, ett framtida problem är att dessa adresser med största sannolikhet kommer att ta slut. Vårt arbete har således fokuserat på att inhämta information som bidrar till en klarare bild av hur dagsläget ser ut kopplat mot implementeringen av IPv6 som sker i Europa och Sverige. För att kunna förklara denna implementering på ett bra sätt finns det delar i arbetet som beskriver de tekniska hinder och möjligheter som bidrar till införandet av detta protokoll. Huvuddelen av tiden har spenderats med att inhämta information och fakta som ger en fördjupad kunskap i ämnet, med avsikten att skriva en gedigen bas som utredningsdelen i arbetet utger. Intervjuer har också varit en del, denna del finns i syfte att ge en bild över hur internetleverantörer arbetar med införandet av IPv6. De organisationer som finns och arbetar med införandet av IPv6 har alla en bra pool med fakta som beskriver hur situationen ser ut i dagsläget. RIPE NCCs databas visar klart och tydligt de organisationer som finns med i arbetet med implementeringen av IPv6. Denna databas samt information tagen från genomförda intervjuer ger oss en uppfattning om att införandet än så länge inte har kommit särskilt långt, detta i relation till bristen av IPv4 adresser som råder. I Sverige jobbar PTS mycket mot att hjälpa organisationer med en eventuell övergång till IPv6, deras arbete är ordentligt men problematiken där är istället att organisationer idag inte är i behov av denna information. Det positiva är således att informationen finns där, hos PTS, att hämta vid behov.Trots att de sista IPv4-blocken är utdelade finns det egentligen inget behov av att implementera IPv6 i dagsläget. Ett IPv4-nätverk med fungerande NAT fungerar och kommer med största sannolikhet fungera ett bra tag framöver.

Actually, transmission and interconnection systems have several vulnerabilities including the facility to analyze traffic that allows a high rate of attacks own IPv4 protocol, therefore it is necessary for services such as FTP, DHCP and SSH seek Migration and Deployment to IPv6 networks. It has characteristics of computer security by IPSEC protocol, regardless of the free operating system or own end customers. This paper analyzes by testing the functionality of the standard settings or IPv6 protocol and its security features in the implementation and setting in a controlled environment to mitigate attacks on authentication, integrity and confidentiality of information, allowing to determine which scenario services analyzed guarantee a higher level of own native IPSEC reliability through regardless of the medium on which data travel, En la actualidad los sistemas de transmisión e interconexión presentan varias vulnerabilidades, entre ellas, la facilidad de analizar tráfico que permite una tasa alta de ataques propios del protocolo IPv4, por ello se hace necesario que servicios como FTP, DHCP y SSH busquen la migración e implementación de redes IP bajo IPv6, la cual cuenta con características propias de la seguridad informática mediante el protocolo IPsec, sin importar el sistema operativo libre o propietario de los clientes finales. El presente artículo evalúa, mediante pruebas de configuración, la funcionalidad del estándar o protocolo IPv6 y sus características de seguridad en la implementación como opción de configuración en un escenario controlado para mitigar ataques en la autenticación, integridad y confidencialidad de la información, permitiendo determinar que los servicios analizados garantizan un mayor nivel de confiabilidad propio y nativo a través de IPsec por cualquier medio sobre el cual viajen los datos.

Due to the increasing demand of the Internet, we are facing a great problem of the depletion of our existing IPv4 (Internet Protocol version 4) network. To solve the situation, we have to use IP version 6 in coming years. But the IPv4 network will not be opt out, but also coexist with IPv6 network. For the transition from IPv4 to IPv6 and vice versa, there are three prominent transition mechanisms are used. They are Dual Stack, Tunneling and Translation. In this paper, the performances of these three mechanisms have been analyzed. IPv6 header format, its security and the routing also have been focused. For the simulation Packet Tracer simulation software has been used.

Due to the huge demand of Internet, computer network has been transited from IPv4 to IPv6 environment. New routing protocols are also needed in IPv6 network. Among them two are very prominent: IETF’s OSPF and Cisco’s EIGRP. In IPv6 network, they are known as OSPFv3 and EIGRPv6 respectively. Though several researchers have worked in these area, but this paper have analyzed the comparisons between these two routing protocols more intensively. In this paper, packet loss, routing convergence speed and end to end delay have been considered as the parameters of the comparisons. The comparisons have been evaluated in Cisco’s simulation environment; Packet Tracer.