Search

The technology of networking allows IoT devices to connect to other cloud-based devices, applications and services. To provide safe and dependable communication across diverse devices, the Internet relies on defined protocols. Standard protocols describe rules and formats which devices employ in network building and management and in data transmission. Networks are created as a technology “stack.” At the bottom of the pile lies a technology like Bluetooth LE. While other technologies, like IPv6 (the logical device for network traffic adjustment and routing), are more up to the stack. Applications which operate above these layers, such as queuing technologies, utilize technology at the top of the stack. The IoT is supposed to overrun the planet. The Internet of Things. Efficient assistance for their modeling is needed to investigate and comprehend the emerging conduct of linked objects. At the center of IoT are flexible and adaptive link patterns between objects, which may naturally be modeled on rudimentary channel-based coordination, the connection failure likelihoods, performance and waiting time, as well as the consumption of resources. The latter is particularly significant because the power and computing budgets of the items are drastically reduced.

With an increase in the number of internet users and the need to secure internet traffic, the IPv4 protocol has been replaced by a more secure protocol, namely IPv6. The IPv6 protocol does not allow intermediate routers to fragment the on-going packets. Moreover, due to IP tunneling, some extra headers are added to the IPv6 packet, exceeding the packet size, resulting in increased packet drops due to lower path mtu. One probable solution is to use Path MTU Discovery (PMTUD) to know the path mtu using ICMP packets. Due to dependency on ICMP error messages, this method faces security and failure issues. In this paper, we propose a Dynamic MTU (DMTU) scheme, which tries to handle the packet drops in IPv6 network, by dynamically adjusting the MTU of each link depending upon the incoming packet size, thereby reducing the number of packet drops by a significant amount. Unlike PMTUD, the algorithm works on intermediate node level which is further optimised by assigning specific phases for validation and then, for processing. The method has ability to work in standalone and in parallel with PMTUD. Using mathematical and graphical analysis, our scheme proves to be much more efficient than the state-of-the-art PMTUD scheme.

In terms of heterogeneous devices and sensors, man and machine collaborate seamlessly, giving birth to the Internet of People, Internet of Things, and Internet of the Future. Within a short period, 30 billion intelligent devices in the form of smart applications will get connected to make an individual's life smoother, more comfortable, faster and accessible from anywhere at any time. IoT combines the power of IPv6 for network connectivity, sensing and nextgen communication technologies to meet future demands. Due to constraint environment in terms of memory, computation, and energy, this review paper will provide in-depth analysis of different OS'es. Candidate OS and Simulator is selected, keeping in mind various barriers and critical design characteristics. By doing this survey, it is possible for other research communities to make an appropriate choice for OS and making IoT a reality. Finally, the case study is also discussed which provides protocol stack implementation details along with deployable testbed, its size in terms of nodes supported and other security challenges. Critical preference level in terms of programming language and application areas from a developer perspective is also analysed and discussed to provide further research direction. IoT integration with future domains, along with various challenges, is explored at the end.

We study the DAO induction attack, a new attack against IPv6 Routing Protocol for Low-Power and Lossy Networks (RPL), the standard routing protocol for the Internet of Things (IoT). In the DAO induction attack, a compromised node in the network periodically transmits a special control message. Each of these crafted control messages induces many nodes in the network to transmit in response. We show that transmitting these unnecessary messages can significantly increase the power consumption of nodes, hence reduce the lifetime of battery-operated IoT devices. In addition, we show that the attack severely impacts end-to-end latency and packet delivery ratio, two important network performance metrics. For instance, in a network with 50 nodes, our simulation results show that the attack increases the average end-to-end latency and packet loss ratio by 410% and 260%, respectively. To counter the attack, we propose a lightweight solution. We show that our solution imposes no overhead when the network is in its normal operation (i.e., it is not under attack) and can quickly detect the attack even when the network experiences high packet loss rates.

Ensuring security and privacy in the Internet of Things (IoT) while taking into account the resource-constrained nature of IoT devices is challenging. In smart home IoT applications, remote users need to communicate securely with resource-constrained network entities through the public Internet to procure real-time information. While the 6LoWPAN adaptation layer standard provides resource-efficient IPv6 compatibility to low-power wireless networks, the basic 6LoWPAN design does not include security and privacy features. A resource-efficient authenticated key exchange (AKE) scheme becomes imperative for 6LoWPAN-based resource-constrained networks to render indecipherable communication functionality. This paper presents a lightweight user AKE scheme for 6LoWPAN-based smart home networks (LAKE-6SH) to achieve authenticity of remote users and establish private session keys between the users and network entities by employing SHA-256 hash function, exclusive-OR operation, and a simple authenticated encryption primitive. Informal security validation illustrates that LAKE-6SH is protected against different pernicious security attacks. The security is further validated formally through the random oracle model. Moreover, through Scyther validation, it is demonstrated that LAKE-6SH is secure. In addition, it is demonstrated that LAKE-6SH renders better security features aside from its low communication and computational overheads.

Many organizations nowadays have multiple sites at different geographic locations. Typically, transmitting massive data among these sites relies on the interconnection service offered by ISPs. Segment Routing over IPv6 (SRv6) is a new simple and flexible source routing solution which could be leveraged to enhance interconnection services. Compared to traditional technologies, e.g., physical leased lines and MPLS-VPN, SRv6 can easily enable quick-launched interconnection services and significantly benefit from traffic engineering with SRv6-TE. To parse the SRv6 packet headers, however, hardware support and upgrade are needed for the conventional routers of ISP. In this paper, we study the problem of SRv6 incremental deployment to provide a more balanced interconnection service from a traffic engineering view. We formally formulate the problem as an SRID problem with integer programming. After transforming the SRID problem into a graph model, we propose two greedy methods considering short-term and long-term impacts with reinforcement learning, namely GSI and GLI. The experiment results using a public dataset demonstrate that both GSI and GLI can significantly reduce the maximum link utilization, where GLI achieves a saving of 59.1% against the default method.

In this paper, we uncover a new off-path TCP hijacking attack that can be used to terminate victim TCP connections or inject forged data into victim TCP connections by manipulating the new mixed IPID assignment method, which is widely used in Linux kernel version 4.18 and beyond. Our attack has three steps. First, an off-path attacker can downgrade the IPID assignment for TCP packets from the more secure per-socket-based policy to the less secure hash-based policy, thus building a shared IPID counter that forms a side channel in the victim. Second, the attacker detects the presence of TCP connections by observing the side channel of the shared IPID counter. Third, the attacker infers sequence and acknowledgment numbers of the detected connection by observing the side channel. Consequently, the attacker can completely hijack the connection, e.g., resetting the connection or poisoning the data stream. We evaluate the impacts of our attack in the real world, and we uncover that more than 20% of Alexa top 100k websites are vulnerable to our attack. Our case studies of SSH DoS, manipulating web traffic, and poisoning BGP routing tables show its threat on a wide range of applications. Moreover, we demonstrate that our attack can be further extended to exploit IPv4/IPv6 dual-stack networks on increasing the hash collisions and enlarging vulnerable populations. Finally, we analyze the root cause and develop a new IPID assignment method to defeat this attack. We prototype our defense in Linux 4.18 and confirm its effectiveness in the real world.

Internet of Things (IoT) is one of the fastest emerging networking paradigms enabling a large number of applications for the benefit of mankind. Advancements in embedded system technology and compressed IPv6 have enabled the support of IP stack in resource constrained heterogeneous smart devices. However, global connectivity and resource constrained characteristics of smart devices have exposed them to different insider and outsider attacks, which put users’ security and privacy at risk. Various risks associated with IoT slow down its growth and become an obstruction in the worldwide adoption of its applications. In RFC 6550, the IPv6 Routing Protocol for Low Power and Lossy Network (RPL) is specified by IETF’s ROLL working group for facilitating efficient routing in 6LoWPAN networks, while considering its limitations. Due to resource constrained nature of nodes in the IoT, RPL is vulnerable to many attacks that consume the node’s resources and degrade the network’s performance. In this paper, we present a study onvarious attacks and their existing defense solutions, particularly to RPL. Open research issues, challenges, and future directions specific to RPL security are also discussed. A taxonomy of RPL attacks, considering the essential attributes like resources, topology, and traffic, is shown for better understanding. In addition, a study of existing cross-layered and RPL specific network layer based defense solutions suggested in the literature is also carried out.

The 6TiSCH (IPv6 over the TSCH mode of IEEE 802.15.4e) Working Group released 6TiSCH Minimal Configuration (6TiSCH-MC) standard for 6TiSCH network bootstrapping. 6TiSCH-MC allocates only one shared cell per slotframe, known as minimal cell, to transmit all types of control packets. Our Markov Chain based probabilistic analysis reveals that few network parameters have high impact on the performance of 6TiSCH network formation due to increasing congestion in minimal cell with the increased number of nodes. This work aims to improve the 6TiSCH network formation process by reducing congestion in minimal cell. For this, the Trickle algorithm, which is used for controlling the rate of routing information carrying packet transmission is modified so that sufficient routing information can be provided without congesting the minimal cell. To reduce the congestion further, a slotframe window (SW) based adaptive scheme is proposed by which nodes are restricted to transmit their control packets frequently. The proposed dynamic Trickle algorithm and SW-based scheme are implemented on Contiki-NG and evaluated using FIT IoT-LAB testbed. The experimental results show that both the proposed schemes together improves the joining time and energy consumption of the pledges compared to the state-of-the-art schemes. Additionally, both the proposed schemes provide fair control packet transmission opportunity among the nodes in a network.

RPL (IPv6 Routing Protocol for Low power and Lossy Networks) is the pseudo-standard routing protocol for Internet of Things. RPL employs a customizable objective function to optimize the routing. The default objective functions used in RPL are i) OF0 (Objective Function Zero) and ii) MRHOF (Minimum Rank with Hysteresis Objective Function). The OF0 is based on the routing metric hop count, whereas the MRHOF uses the ETX metric. They both do not measure the actual link quality. The link quality is directly related to the reliability of the network. The quality of the link can be estimated through methods that are both hardware and software based. The software-based methods are easy to implement and to ensure the reliability of the network. There are different software-based link quality estimation methods; the prominent methods among them are ETX and Link Quality Level (LQL). The ETX is a method of approximation of the transmitted packets. It uses probe packets to predict the expected transmission count, and it may not accurately reflect the link quality. The proposed Link Quality-Based Objective Function (LQBOF) makes use of the LQL metric which provides better link estimation values than the ETX method. The proposed method intends to provide a more reliable routing based on the link quality. The LQL is estimated through a metric called Packet Reception Rate (PRR). The LQL is calculated and ranked as values from 1 to 7, reflecting the best and worst link quality, respectively. The estimated LQL value is linked with the default ETX in computing the best path. This method intends to increase the reliability of the network. The reliability of the objective function is evaluated with the performance metrics packet delivery ratio, power consumption, throughput, convergence time, control traffic overhead and hop count.

Internet connects people to people, people to machine, and machine to machine for a life of serendipity through a Cloud. Internet of Things networks objects or people and integrates them with software to collect and exchange data. The Internet of things (IoT) influences our lives based on how we ruminate, respond, and anticipate. IoT 2021 heralds from the fringes to the data ecosystem and panaches a comfort zone. IoT is overwhelmingly embraced by businessmen and consumers due to increased productivity and convenience. Internet of Things facilitates intelligent device control with cloud vendors like Amazon and Google using artificial intelligence for data analytics, and with digital assistants like Alexa and Siri providing a voice user interface. Smart IoT is all about duplex connecting, processing, and implementing. Centralized IoT architecture is vulnerable to cyber-attacks. With Block Chain, it is possible to maintain transparency and security of the transaction's data. Robotic Process Automation (RPA) using bots has automated laborious tasks in 2019. Embedded Internet using Facial Recognition could reduce the coronavirus pandemic crisis by making a paradigm shift from fingerprint sensors to facial recognition. Security concerns are addressed with micro-segmentation approaches. IoT, an incredible vision of the future makes systems adaptive with customized features, responsive with increased efficiency, and procurable with optimized cost. This research delivers a comprehensive insight into the technical perspectives of IoT, focusing on interoperability, flexibility, scalability, mobility, security, transparency, standardization, and low energy. A smart classroom is implemented based on the concepts of IoT.

The internet protocols are increasingly imposed in recent times, there is a need to propose a study on the performance analysis on OSPFV3 and EIGRP in IPV6 application. IP is currently involved in sensitive areas of internet protocols, remote sensing, telepresence, computer networks and so on. The IP exists in two versions (IPv4 and IPv6), the difference between these two protocols is distinguished in terms of features, operation, and performance. In this study, measuring and evaluation on the performance of the two IPv4 and IPv6 protocols in the networks of communicating companies are proposed for further studies based on the literature gaps identified. The study should be performed by varying the routing protocols RIP, RIPnG, OSPF, OSPFv3, IS-IS and ISIS v6. Further studies should conduct simulation on performance analysis of OSPFV3 and EIGRP in IPV6 applications. The gaps identified after reviewing a number of literature on OSPFV3 and EIGRP with IPV6 network needs to be done since it sought to bridge gaps in literature.

This study is conducted to investigate experts’ views to determine the Omani higher education institutions readiness and deployment of IPv6. In particular, the study aims to assess the institutional awareness, current environment, policy, planning, and resources. Descriptive method was followed and two study instruments were designed and implemented, namely questionnaire and semi structured interviews. Both instruments were validated and implemented on a sample of (12) experts for the questionnaire and (5) for the interviews. The results revealed that IPv6 was not sufficiently attended to by the Omani HEIs and it is partially planned for, implemented, and/or deployed. Efforts should be made to help establishing strategies, research and teaching content. Based on the findings of the research, conclusions and recommendations are suggested.

The Internet of Things (IoT) is going to create a heterogeneous network of billions or trillions of connected things with self-aware, self-configuration capabilities that will exchange data with ea...

Internet of Things (IoT) has seen a lot of traction over the last few years and is expected to play a major role in controlling devices and communication. IoT network involves sensors with constrai...

Network scanning is widely used to assess security postures of hosts/networks, discover vulnerabilities, and study Internet trends. However, scans can generate large amounts of traffic, and efficient probing of IPv6 hosts (where global scans are infeasible) is an outstanding problem. In this chapter, we develop a framework for efficient Internet scans using machine learning, by preemptively detecting and avoiding the scanning of inactive hosts. We evaluate this framework over global scans of the IPv4 space over 20 ports, and show that using location and ownership information we can reduce the bandwidth of scans by 26.7–72.0%, while discovering 90–99% of active hosts. We then evaluate a sequential method by gradually adding information obtained from scanned ports to adaptively predict the remaining port responses, yielding 47.4–83.5% of bandwidth savings at the same true positive rates. Our framework can be used to lower the bandwidth consumption of scans and increase their hit rate, thereby reducing their intrusive nature and enabling efficient discovery of active devices.

The transfer of IPv6 packets over the low-power personal area network (6LoWPAN) using IPv6 routing protocol enables small devices with limited processing power to transmit wirelessly. Privacy enabled disjoint and dynamic address auto-configuration (PeDAAC) is one of the 6LoWPAN protocols designed to ensure the privacy of the nodes by changing IPv6 and MAC addresses. One of the main purposes of this protocol is to keep the identity of the sender and receiver secret, so it can have different applications, such as hiding the identity of patients in the hospital or military applications to send data anonymously. PeDAAC is a dynamic protocol whose purpose is to create a conflict-free, auto-configuring IPv6 addressing scheme, eliminating the need for duplicate address detection. It results in lower latency and optimal communication costs, and the IPV6 addresses of each node will be unique. Two successful attacks on the PeDAAC protocol are discussed in this paper. An adversary can attack the availability of the nodes and can cause a denial of service attack. Also, by detecting the node’s identity, changes over time can gather more messages, which increases the likelihood of successful eavesdropping. The greatest common divisor-based lightweight improvement (GCDLi) is a proposed lightweight extension of this paper to PeDAAC protocol to protect against these attacks. Beyond that, it counteracts two types of security threats: eavesdropping and denial of service attack. The proposed extension of the protocol improves the privacy and anonymity of the nodes. The time complexity of the proposed method is $$ \theta \left(\log n\right) $$ , and due to the limited range of input values (maximum 16 bit), it is considered a lightweight improvement.

Internet of Multimedia Things (IoMT), a special subset of Internet of Things (IoT), is a novel paradigm which is progressively increasing and gaining in popularity, allowing many multimedia content based applications such as Wireless Multimedia Sensor Networks (WMSNs). The standard IPv6 Routing Protocol for Low power and Lossy Networks (RPL), originally designed for transmitting scalar data traffic of IoT applications, should be customized in order to deal with IoMT applications which pose new challenges and requirements in terms of the Quality of Service (QoS) and the user’s Quality of Experience (QoE). For this purpose and thanks to the flexibility and adaptability of RPL, we propose, in this paper, a multipath version of RPL, not defined in the RPL specification RFC 6550, named MP-RPL. MP-RPL leverages the multiparent feature offered by RPL in order to construct multiples end-to-end paths of different qualities based on radio link quality measurements. It is intended to improve the video traffic delivery for IoMT based WMSN applications by simultaneously using the built paths while taking into account the video traffic differentiation as per priority levels. Compared to the traditional single-path RPL, the results obtained from simulations when considering the influence of video characteristics, show that our proposal provides feasible and acceptable QoS and QoE performance metrics for multimedia applications, while maintaining RPL compliance.

Performance and communication security in the Internet of Things (IoT) area draw a major concern for both academic and industrial communities. Indeed, an emerging number of IoT protocols are getting involved in the protocol stack, implying that the need for new security measures is also increasing. The Media Access Control (MAC) protocol Time Slot Channel Hopping (TSCH) has recently gained significant popularity thanks to its reliability and robustness. It quickly became the basis of IPv6 over the TSCH mode of IEEE 802.15.4e (6TiSCH), a complete communication stack tailored for Industrial IoT networks. In this paper, we are interested in the lack of cooperation of some network nodes, referred to as selfishness, which often leads to network performance degradation. We introduce this concept in 6TiSCH networks for the first time, and we show how they get immunized. We first define a selfishness framework, and we integrate it into the 6top Protocol (6P). Then, we introduce a fuzzy logic-based technique enabling the detection of selfish nodes, along with an anticipatory countermeasure that tells cooperative nodes how to deal with selfish neighbors. We implement and integrate the proposed algorithms into the 6TiSCH simulator, and we conduct a thorough experimental study. Simulation results show how much the latency, Packet Delivery Ratio (PDR), and throughput are affected and how our proposal can significantly improve them.

Industrial applications of Internet of Things (IoT) demand high reliability, deterministic latency, and high scalability with energy efficiency to the communication and networking protocols. 6TiSCH is a time slotted channel hopping (TSCH) medium access control (MAC) protocol running under the IPv6 enabled higher layer protocols for industrial IoT (IIoT). In this paper, we theoretically analyze the network formation protocol in 6TiSCH network. Analysis reveals that the performance of the 6TiSCH network degrades when a pledge (new node) joins as it increases channel congestion by allowing to transmit beacon message. On the other hand, beacon transmission is essential to expand or reorganize the present network topology. To overcome this performance tradeoff, a channel condition based dynamic beacon interval (C2DBI) scheme is proposed in which beacon transmission interval varies with channel congestion status during network formation. Channel congestion status is estimated by each joined node in distributed manner, and subsequently changes its beacon generation interval to best fit with present condition. Finally the performance of C2DBI is compared with the minimal configuration standard and few other benchmark protocols. Analytical, simulation and real testbed results show that the proposed scheme outperforms the state of the art protocols in terms of joining time and energy consumption during network formation.

Firewalls are what some consider to be the most essential devices which can safeguard networks. Misconfigurations of firewall rules often lead to rule anomalies which can be easily used by network attacks to paralyze the managed network. However, finding such rule anomalies is no easy task due to its time-consuming, laboring, strenuous characteristics. What’s worse is, with the massive and increasing deployment of IPv6 in the current Internet, anomaly diagnosis for firewall rules becomes even harder. In this paper, a bit vector-based anomaly diagnosis approach is proposed and realized where it can pinpoint anomalies among IPv6 firewall rules not only effectively, but also much more efficiently and more easily. As a result, a visualized platform for our IPv6 firewall rule anomaly diagnosis has been implemented and comprehensive performance evaluations on anomaly diagnosis have been conducted also, in which our developed approach shows its excellence and feasibility.

Pengalokasi IP Address versi 4 (IPv4) yang mulai menipis berjalan secara beriringan dengan semakin meningkatnya kebu-tuhan dunia teknologi informasi. Untuk memenuhi permintaan dari penggunaan IP Address, maka diterapkanlah Internet Protocol version 6 (IPv6). Hadirnya IPv6 diharapkan menjadi sebuah solusi dari permasalahan yang dihadapi oleh IPv4 seperti permasalahan terbatasnya alokasi IP Address dan keamanan jaringan komputer. Pengimplementasian IP Address didalam jaringan komputer tidak lepas dari adanya protokol routing. Routing protocol Enhanced Interior Gateway Routing Protocol (EIGRP) pun ikut berkembang dengan adanya penggunaan IPv6 menjadi EIGRP for IPv6 (EIGRPv6). Perkem-bangan jaringan haruslah mempertimbangkan faktor Quality of Service (QoS) di dalamnya. Hot Standby Router Protocol (HSRP) IPv6 hadir untuk memastikan layanan jaringan dapat berjalan dengan maximal dan stabil saat terjadinya link failure pada layanan jaringan. HSRP IPv6 mampu mengoptimalkan packet loss saat terjadinya redundancy dengan nol (0) packet loss, serta redundancy time yang dibutuhkan saat terjadinya redundancy dari router active menuju router standby 10 second dan router standby menuju router active 26,2 second

In the modern era, prevalence of the Internet of Things (IoT) devices that have de facto protocol as IPv6 routing protocol for low power and lossy networks (RPL). Yet, RPL protocol is vulnerable to...

Voice transmission over the Internet network is now taken for granted. Many end-user applications address this issue. However, this paper focuses on the specific use of the SCCP protocol created by Cisco, its implementation in a computer network and end devices, determination of the operational properties of this implementation, and their comparison in different conditions. VoIP traffic is compared at different bandwidths and implemented by different configurations of IP protocols. By investigated implementations of IP protocols are meant IPv4, IPv6, and IPv4 protocol with applied NAT. As part of the application of various IP protocols is also compared VoIP communication with a video stream on a local basis. The conclusion of the paper is devoted to the graphical evaluation of these observations and to draw conclusions based on them.

The IPv6 routing protocol for low power and lossy networks (RPL) has gained widespread application in the Internet of Things (IoT) environment. RPL has inherent security features to restrict external attacks. However, internal attacks in the IoT environment have continued to grow due to the lack of mechanisms to manage the secure identities and credentials of the billions of heterogeneous IoT devices. Weak credentials aid attackers in gaining access to IoT devices and further exploiting vulnerabilities stemming from the underlying routing protocols. Routing attacks degrade the performance of IoT networks by compromising the network resources, topology, and traffic. In this paper, we propose a holistic framework for the prediction of routing attacks in RPL-based IoT. The framework leverages Graph Convolution Network-based network embedding to capture and learn the latent state of the nodes in the IoT network. It uses a Long Short Term Memory model to predict network traffic. The framework incorporates a Feedforward Neural Network that uses network embedding and traffic prediction as input to predict routing attacks. The accuracy of any learning model depends on the integrity of the data provided to it as input. Therefore, the framework uses smart contract-fortified blockchain technology to establish secure channels for IoT data access. The smart contract within the blockchain generates warning impulses in the case of abnormal behavior of nodes. The framework predicts normal scenarios, resource attack scenarios, traffic attack scenarios, and topological attack scenarios with a fair accuracy of 94.5%, 82.46%, 91.88%, and 86.13%, respectively.

Drastic reduction in the manufacturing cost of sensors and actuators has resulted in considerable growth in the number of smart objects. The so-called Internet of Things (IoT) blends the real and virtual environments and removes time and distance barriers. It is widely perceived as a major enabler for the efficient and effective provision of services across a range of sectors. It has naturally attracted the interest of cyberattackers. Due to the heterogeneity, resource-constraints, scale, and internet connectivity of IoT devices, each IoT layer is prone to various threats. Intruders consider the network layer of IoT as the gateway and leverage vulnerabilities in the routing protocol to compromise the Confidentiality, Integrity, and Availability (CIA) of connected nodes. Researchers have proposed different security infrastructures to mitigate harm to IoT networks. One of these is the Intrusion Detection System (IDS). An IDS is an essential component for the network security layer and is widely adopted to reinforce the security of the IoT network. This systematic literature review explores the IPv6 Routing Protocol for Low Power and Lossy Networks (RPL) and its existing threats, classifies relevant IDS techniques and identifies areas requiring further investigation. We review 103 published papers in this domain.

Link dynamics due to environmental change is a critical challenge for wireless networking, and handling it is essential for wireless protocols, especially for low-power and lossy multihop wireless networks (LLNs). Prior work have only studied methods to detect and cope with short-term and long-term link dynamics in LLN. In this work, we tackle the midterm dynamics due to the opening and closing of doors and windows that can happen in a time scale of a few minutes to hours in an indoor LLN. Specifically, we study how midterm link fluctuations impact the performance of standard IPv6 routing protocol for LLN (RPL), and design ‘RPLIE,’ a novel and backward-compatible lightweight enhancement to RPL that detects and overcomes the negative impact of such dynamics. We define ‘opportunistic links’ and propose a novel routing metric, expected breakage cost (EBC), which represents the expected number of link transmissions required from a link breakage to a routing parent change. We implement RPLIE on real embedded devices, and evaluate its performance against the standard RPL via experiments on a 31-node testbed to show that RPLIE achieves significantly better packet delivery performance while using less overhead.

The IPv6 routing protocol for low power and lossy networks (RPL) has some shortcomings, such as high packet loss rate and low network lifetime when used in Internet-of-Things (IoT) environments under heavy traffic. To overcome the RPL limitations, the current research tends to focus on a new paradigm of routing, referred to as Anycast Routing, in which a source node targets a set of destinations rather than a single one. In this article, we present a protocol that exploits the anycast perspective in the routing process since an important aspect of most IoT environments is to forward packets to a gateway, no matter which. Besides, we interconnect various instances of RPL to achieve better routing performance by offering the possibility of cooperation among various simultaneous instances of RPL within the network. Finally, to reach higher performance, we use a rank computation and parent selection mechanism that is different from those of the RPL. The evaluation results, which are obtained through simulation with the Cooja simulator, show that EM-RPL outperforms RPL in reducing the environmental footprint of the network, while it extends the network lifetime, decreases packet loss ratio, and better controls interpacket intervals and parent change overhead.

Despite unprecedented advancements, wireless local area network (WLAN) technologies for the Internet of Things (IoT), such as IEEE 802.11ah (i.e., WiFi-HaLow), are prone to serious security threats, owing to their constrained computational and memory resources, which limit the use of heavyweight intrusion protection and security protocols. To address this problem, security administrators (sec-admins) must perform regular and comprehensive vulnerability assessments of IoT devices. An Internet-wide port scan (IWPS) is the initial step. However, the medium access control mechanism of IEEE 802.11ah, designed specifically for heterogeneous IoT traffic and low-power operations, can degrade network performance in the case of traditional port-scan traffic. Moreover, Internet-security (IPSec) protocol support is mandatory for IPv6-enabled IoT devices to ensure data confidentiality, integrity, and availability. Although the objective of a port scan is to improve IoT security, the resultant network performance can adversely affect IPSec services. Therefore, in this study, we optimize the IWPS to maximize the IoT security over IEEE 802.11ah WLAN. To this end, we propose novel mathematical models to evaluate IoT security based on port-scan network performance and IPsec services, which derives an optimal scan rate for sec-admins. The effectiveness of the proposed framework is verified by comprehensive numerical analysis, which shows that our approach minimizes the risk to IoT devices while probing them at an optimal scan rate.

The Internet of things (IoT) is made up of huge sets of networked low-power devices. Regardless of the application specificities, those devices are generally tasked to provide highly important services that can be reached out through the internet. Communications with IoT networks cannot be achieved without the support of efficient underlying routing schemes. However, the constraints related to scarce resources, as well as the wireless and lossy nature of IoT networks may tremendously affect the communications reliability. Consequently, routing efficiency could be affected. Moreover, the exposure to internal and external cyber-attacks, especially those that threaten data and service availability, complicates even further routing and security missions in such a constrained context. In this paper, we propose an efficient solution that enhances both the communications reliability and security in the heterogeneous IoT-enabled low power and lossy networks. The solution relies on three variants of adaptive and secure multipath routing for IPv6 routing protocol for low-power and lossy networks (RPL). To the best of our knowledge, this is the first solution that deals with multipath routing security issue for RPL protocol, in IoT contexts. The proposed solution is evaluated with Cooja simulator of Contiki OS. The assessment results show obviously the effectiveness of the proposed solution for improved communication reliability and security, at low costs.

Internet of things (IoT) is renowned for being a massive revolution led by business leaders and researchers. Routing protocol for low-power and lossy network (RPL) is a standardized protocol that serves the routing need of the IPv6-based low-power and lossy networks, which are the significant enablers of the IoT technology. Despite its many outstanding features, RPL offers very low protection against different routing attacks. In this respect, we mainly emphasize on the sybil attack. Specifically, we focus on three different types of sybil attack on a realistic smart home network topology. Considering the involvement of resource-constraint devices, we propose and evaluate a novel decentralized countermeasure against these attacks. The proposed countermeasure is based on a hybrid approach that involves the use of the geographical location of the nodes and a trust value-based parent selection procedure. Along with this, we use specially configured monitoring nodes that are responsible for the detection of the malicious attacker node(s). Further, we use RPL’s multi-instance property to integrate the proposed decentralized architecture into the exiting RPL protocol. We implement the proposed countermeasure in Cooja, the Contiki operating system-based network simulator. The results obtained through our experiments validate the practicality of the proposed countermeasure.

Application-aware Traffic Engineering (TE) plays a crucial role in ensuring quality of services (QoS) for recently emerging applications such as AR, VR, cloud gaming, and connected vehicles. While a deterministic application-aware TE is required for these mission-critical applications, a negotiation procedure between applications and network operators needs to undergo major simplification to fulfill the scalability of the application based on emerging microservices and container-based architecture. In this paper, we propose a NetworkAPI framework which allows an application to indicate a desired TE behavior inside IP packets by leveraging Segment Routing over IPv6 (SRv6). In the NetworkAPI framework, the TE behavior provided by the network operator is expressed as an SRv6 Segment Identifier (SID) in the form of a 128-bit IPv6 address. Because the IPv6 address of an SRv6 SID is distributed using IP anycast, the application can utilize the unchanged SRv6 SID regardless of the application's location, as if the application controls an API on the transport network. We implement a prototype of the NetworkAPI framework on a Linux kernel. On the prototype implementation, a basic packet forwarding performance is evaluated to demonstrate the feasibility of our framework.

Routing discovery is a pivotal component of the communication stack in low-power and lossy networks (LLNs). The IPv6 routing protocol for LLNs, termed RPL, has been recently standardized to provide routing discovery in a wide range of LLN-based deployments realizing the Internet-of-Things (IoT) vision. RPL was mainly designed with the assumption that the predominant traffic flow would be gathering data toward a single destination, typically the root node. However, node-to-node (N2N) communication, where the root is neither a source nor destination, is a prime requirement in most of the LLN-based applications, such as actuating, decision making, and controlling applications. RPL in its current form does not cater well to such applications where there is a good number of inward N2N traffic flows. In this article, we propose a hybrid routing mechanism based on RPL for high N2N communications in LLNs referred to by HRPL. HRPL is implemented on Contiki and evaluated through extensive simulations on Cooja. HRPL is fully backward compatible with RPL where HRPL and RPL nodes can work together seamlessly in a hybrid network. Results show that HRPL provides a considerable improvement in the packet delivery ratio relative to the standardized RPL-based modes and to the RPL-based opportunistic routing approach. While HRPL requires a slightly larger memory footprint more than that for RPL, HRPL manages to significantly reduce the control plane packets, number of hops, and MAC transmissions needed to successfully deliver N2N data packets. Accordingly, this is translated to lower packet delay and less energy consumption.

International audience; Data gathering systems in the Industrial IoT require an end-to-end latency as low as one second with coverage of a few hundred meters. The 6TiSCH standard is well suited for these types of applications. A 6TiSCH network is a multi-hop wireless IPv6 network which uses Time Slotted Channel Hopping (TSCH). TSCH is a medium access mode of IEEE802.15.4 which provides deterministic properties, and increases robustness against external interference and multipath fading. A key component of TSCH is its scheduling function that builds the communication schedule, which greatly impacts network performance. Although there are several proposed TSCH scheduling solutions in the literature, most of them are not directly applicable to 6TiSCH for real-world deployments because they fail to take into consideration the dynamics of a network. Some of them assume a fixed routing topology, which does not match 6TiSCH where the routing topology dynamically changes with the radio environment. In this article, we propose a full-featured 6TiSCH scheduling function called YSF, that autonomously takes into account all aspects of network dynamics, including network formation phase and parent switching. YSF aims at minimizing latency and maximizing reliability for data gathering applications. We evaluate YSF by simulation, and compare it to MSF, the state-of-art scheduling function being standardized by the IETF 6TiSCH working group.

The 3D critical node (C-N) detection can play a vital role in algorithm development of security, surveillance, monitoring, topology detection, and situation-aware emergency navigation for the Internet of Things (IoT). However, 3D C-N detection problem in IoT raises some issues and also introduces new challenges. The existing state of the art in 3D C-N detection shows that rely on prior known anchor node, known coordinate, embedding of the 3D situation on a 2D geometrical structure like circles and presence of unreliable node and ignores the energy constraint in Low Power and Lossy Networks IoT. In this paper, we present a practical, distributed, and energy-efficient algorithm for reliable 3D C-N detection. The goal of the proposed mechanism is twofold, firstly a 3D critical nodes (C-N) detection algorithm is proposed which uses only Received Signal Strength Indicator information of neighbor. Secondly, a correlation-based algorithm for the reliability approach is proposed to increases the node resilience against malicious IoT nodes. The complexity of our proposed algorithms has a time complexity of $$\mathcal {O}(\log (N))$$ and computation cost $$\mathcal {O}(\delta (\log N))$$ where N is the number of nodes in networks, and $$\delta $$ is the total number of forward and the backward message from an individual node. To validate our work, we implemented our proposed approach with the IPv6 Routing Protocol for Low-Power and Lossy Networks (RPL) based IoT routing protocol compare it with RPL and cryptographic approach Version Number and Rank Authentication (VeRa). The result shows that the proposed approach can detect 10–15% more C-N nodes. Result also shows that our proposed algorithm has better PDR than RPL based approach by 12% and less than VeRa (cryptographic approach) by 8% however our proposed approach consumes almost 50% less power than the VeRa.

Mobile IPv6 (MIPv6) is considered inefficient to support mobility due to larger handover delay and signaling overhead. Therefore, Hierarchical MIPv6 (HMIPv6) is designed by introducing a Mobile Anchor Point (MAP) in the MIPv6 architecture. The MAP considerably drops the handoff delay and signaling load for mobility management in IPv6. The Three Layered MIPv6 (TLMIPv6), the focus of this paper, is influenced by the benefits of placing MAPs for efficient mobility management. In this model, three MAPs are placed in the architecture to reduce signaling cost and handoff latency. These MAPs are placed hierarchically in a tree like architecture, and the movement of nodes is coordinated by different MAP based on nodes’ movement patterns. The behavior of the proposed model is simulated under various traffic scenarios and mobility conditions and compared with MIPv6 and HMIPv6 and Flow Based Distributed Mobility Management (FBDM) protocols. The results depict that when users are less mobile or confined their movements to a small geographical area, the proposed TLMIPv6 outperforms MIPv6, HMIPv6, and FBDM in handoff latency and signaling costs. Some suitable application scenarios for adopting TLMIPv6 are also mentioned at the end of the paper. The future scopes of the work are outlined.

DNS64 is an important IPv6 transition technology that facilitates the communication of an IPv6 only client with an IPv4 only server, which becomes a more and more common scenario. Several different DNS64 implementations exist, and their performance is a relevant decision factor for network operators. RFC 8219 has defined a benchmarking methodology for DNS64 servers, which requires the operation of an authoritative DNS server at 220% of the query rate used for DNS64 benchmarking. In this paper, we aim to build an authoritative DNS server that operates at 2.2 million qps (queries per second) rate, thus it facilitates DNS64 benchmarking up to 1,000,000 qps rate. To that end, we compare the performance of BIND, YADIFA, NSD, Knot DNS and FakeDNS (a special purpose software) to find the best suiting one of them. We fully disclose the details of our measurements including the configuration of the DNS implementations, the usage of our improved software tester called dns64perf ++, and the details of the hardware and software measurement environment in the NICT StarBED, Japan. We perform a series of measurements to examine, how the performance of the tested solutions scale up with the number of the active CPU cores from 1 to 32. Besides their performance, we also measure their memory consumption and zone load time. We present and discuss all the results. In addition to successfully building an authoritative DNS server with the required performance, we also make recommendations, which solutions suit to different special needs.

Accountability and privacy are considered valuable but conflicting properties in the Internet, which at present does not provide native support for either. Past efforts to balance accountability and privacy in the Internet have unsatisfactory deployability due to the introduction of new communication identifiers, and because of large-scale modifications to fully deployed infrastructures and protocols. The IPv6 is being deployed around the world and this trend will accelerate. In this paper, we propose a private and accountable proposal based on IPv6 called PAVI that seeks to bootstrap accountability and privacy to the IPv6 Internet without introducing new communication identifiers and large-scale modifications to the deployed base. A dedicated quantitative analysis shows that the proposed PAVI achieves satisfactory levels of accountability and privacy. The results of the evaluation of a PAVI prototype show that it incurs little performance overhead, and is widely deployable.

The Internet of Things (IoT) brings new potentials in humans’ everyday life activities through enabling applications with stringent communication demands, including mobile IoT applications. State-of-the-art routing protocols for the IoT, such as IPv6 routing protocol for low-power and lossy networks (RPL), have not been originally designed for such challenging applications. Recent proposals blend the software-defined networking (SDN) paradigm with IoT, enabling better-informed and bespoke routing control, matching the application requirements. In this article, we propose SD-MIoT , an open-source SDN solution for mobile IoT environments that consists of a modular SDN controller and an OpenFlow-like protocol. SD-MIoT detects passively in real-time, the network’s mobile nodes through mobility detector (MODE), an intelligent algorithm that utilizes the connectivity graph of the SDN controller. It incorporates novel mobility-aware topology discovery mechanisms, routing policies, and flow-rule establishment methods, all of them balancing control overhead with routing robustness, according to nodes’ mobility behavior detected by MODE. We provide extensive evaluation results over two realistic scenarios, further confirming the suitability of SD-MIoT for mobile IoT environments and demonstrating reliable operation in terms of successful data packet delivery with low control overhead.

Internet of Things (IoT) is a network of “things,” connected via Internet, to collect and exchange data. These “things” can be sensors, actuators, smartphones, wearables, computers, or any object that is interconnected to provide specific services. Similarly, wireless sensor network (WSN), as a part of IoT, forwards the gathered data after sensing any event. The scalability and heterogeneity of IoT offer limited protection and is prone to diverse attacks, including WSN-inherited attacks. Moreover, IPv6 routing protocol for low power and lossy networks (RPL), a de facto routing protocol for IoT networks, also suffers from certain vulnerabilities based on its features and functionalities. Researchers have proposed various mitigation mechanisms for secure networks and routing in IoT. Recently, trust-based approaches have gained tremendous interest from the research community to embed security in IoT networks and routing protocols. In the existing literature, several trust models have been introduced according to the security needs of the IoT system, such as SecTrust, DCTM-IoT, CTRUST, etc. In this research, security issues and requirements of IoT networks and RPL routing protocol are studied with respect to various attacks, such as Blackhole, Spoofing, Rank, etc. Additionally, various mitigation methods and significance of trust models in IoT for secure routing are analyzed. Further, trust metrics in IoT environments, including the open issues and research challenges, as well as the implication of trust as a security paradigm in IoT networks and routing protocols are discussed.

The transition between the Internet Protocol Version 4 (IPv4) and Internet Protocol Version 6 (IPv6) will be a long process during both protocol coexists and it unreasonable to expect that many millions of IPv4 nodes will be converted overnight. Mobility is becoming ubiquitous nowadays. This paper has described about a background study of IPv4 and IPv6, the needs of IPv6, transition mechanisms in the various architectures, and comparison of the IPv4 and IPv6 in two major areas; header format and transition mechanism. Then, the transformation of IPv4 to IPv6 addressing by using tunnel and dual stack protocol will be discussed.

Internet of things (IoT) is a network of different interconnected objects that are capable to collect and exchange data without human interaction. IPv6 Routing Protocol for Low-power and Lossy Networks (RPL) is the common IoT routing protocol. One of the main drawbacks of the RPL protocol is lack of support of load balancing leads to unfair distribution of traffic load in the network which may decrease network efficiency. In this paper for load balancing, we proposed a new method called C-Balance based on cluster ranking to increase the network lifetime. In this method, two ranks are calculated for each node. The first rank is used to identify clusters and cluster heads and the second rank is used to select parents of each cluster head to forward packets towards the destination. To calculate these ranks, several metrics are used including Expected Transmission Count, hop count, residual energy and number of children. To investigate the performance of the proposed method, it has been simulated with Cooja simulator in the form of nodes with mobility and non-mobility scenarios plus using a random topology network with 20, 40 and 60 nodes experiments. The results are compared with OF0 and MRHOF standard objective functions as well as the QU-RPL method. The final results in both scenarios show that the proposed method in the field of energy consumption, network lifetime and load balancing has improved compared to the other methods. In terms of end-to-end delay, the proposed method has more delay compared to the standard objective functions and QU-RPL method. The calculation of the mean packet delivery ratio (PDR) of these four methods also shows that the proposed method has an acceptable performance. Final results indicate that on average, there is a 30–45% improvement in energy consumption, 15–23% reduction in average number of children and 22–48% improvement in network lifetime are obtained compared to the other methods. Finally, there is about 12% progress for PDR compared to the OF0.

From the perspective of the emerging Industrial Internet of Things (IIoT), the 6TiSCH working group has been created with the main goal to integrate the capabilities of the IEEE 802.15.4e time-slotted channel hopping (TSCH) with the IPv6 protocol stack. In order to support time-critical applications in IIoT, reliable real-time communication is a key requirement. Specifically, aperiodic critical traffic, such as emergency alarms, must be reliably delivered to the destination-oriented directed acyclic graph root within strict deadline bounds to avoid system failure or safety-critical situations. Currently, there is no mechanism defined in the 6TiSCH architecture for timely and reliably handling of such traffic and its prioritization over the noncritical one. In this article, we introduce REA-6TiSCH, a reliable emergency-aware communication scheme to support real-time communications of emergency alarms in 6TiSCH networks. In REA-6TiSCH, the aperiodic emergency traffic is opportunistically enabled to hijack transmission cells preassigned for the regular periodic traffic in the TSCH schedule. Moreover, we introduce a distributed optimization scheme to improve the probability that an emergency flow is delivered successfully within its deadline bound. To the best of our knowledge, this is the first approach to incorporate emergency alarms in 6TiSCH networks. We evaluate the performance of REA-6TiSCH through extensive simulations and the results show the effectiveness of our proposed method in handling emergency traffic compared to the Orchestra scheme. Additionally, we discuss the applicability of REA-6TiSCH and provide guidelines for real implementation in 6TiSCH networks.

IPTV (Internet Protocol Television) includes several video components. The IMS (IP Multimedia Subsystem) cannot differentiate between them what causes their treatment similarly. These sub-components must have different priorities because they have distinct QoS constraints. In this paper, we suggest the implementation of IPTV in a heterogeneous network that improved QoS by providing the capability to prioritize the sub traffic according to the system administrator policy. A new IPv6 flow label field definition was proposed that is ready for standardization. OPNET Modeler software is used to design our approached architecture. The results show that IPTV users receive different amounts of video data based on the stream's priority.

IPv6 is the next Internet Protocol version designed to eventually replace IPv4 as the amount of potentially allocated IPv4 addresses is insufficient. The vulnerabilities of IPv6 protocols and the attacks against them demand more attention to be paid. The multicast mechanism is one of the crucial mechanisms that are related to the nature of IPv6 protocol. Despite its usefulness in performing basic tasks in IPv6 environments, the multicast mechanism is considered as a security hole that calls to be understood by the security specialists and IPv6 network administrators. To address the multicast security aspects, this paper presents the attacks that utilize the multicast vulnerability along with the identification of countermeasures for each attack. In particular, this paper analyzes the state-of-the-art attacks and ranks them based on a new severity ranking method to provide significant security guidance for deploying IPv6 networks.