Search

Nowadays we use Internet Protocol (IP) versions 4 (IPv4) and 6 (IPv6) at the same time. It is very difficult to determine the rate of IPv6 and the state of its deployment exactly. In our survey, paper we present some tools and methods that can be used to estimate the proportion of IPv6. First, we will show some server side methods that mostly use provider-measurable data, so they may not be available to everyone. Next, we introduce various client-side tools that can be used in a much broader context, and then present the use of survey methods. Then we are reviewing some researches, which provide more comprehensive insight into the transition to IPv6 using complex measurement methods. Finally, we compare and categorize the presented metrics based on the availability of data sources and the extent of the measurement duration. We know that there is clearly no best among the various methods. Choosing the right technique depends greatly on the data and tools available to the researcher.

The paper focuses on design, background and experimental results of real environment of DDoS attacks. The experimental testbed is based on employment of a tool for IT automation to perform DDoS attacks under monitoring. DDoS attacks are still serious threat in both IPv4 and IPv6 networks and creation of simple tool to test the network for DDoS attack and to allow evaluation of vulnerabilities and DDoS countermeasures of the networks is necessary. In proposed testbed, Ansible orchestration tool is employed to perform and coordinate DDoS attacks. Ansible is a powerful tool and simplifies the implementation of the test environment. Moreover, no special hardware is required for the attacks execution, the testbed uses existing infrastructure in an organization. The case study of implementation of this environment shows straightforwardness to create a testbed comparable with a botnet with ten thousand bots. Furthermore, the experimental results demonstrate the potential of the proposed environment and present the impact of the attacks on particular target servers in IPv4 and IPv6 networks.

Nowadays more and more IoT devices, including a large number of IoT servers, have been deployed on the Internet. The security of IoT servers has always been a challenge. In this paper, a new model named addressless IoT server is proposed, which allows people to use the large IPv6 address space to protect IoT server security. The server is allocated an IPv6 prefix instead of an address. When the authenticated client initiates communication, it uses an encryption mechanism to generate a specific destination address under the prefix. The server verifies the destination address when receiving the packet, and discards the packet if the verification fails. In this way, the model can prevent attackers from perceiving the server and launching scans or attacks, while remains compatible with the current Internet. The prototype is implemented and an extensive set of experiments are conducted in this paper. The results demonstrate that the model can better protect server security.

The exhaustion of IPv4 addresses has led to the rapid implementation of IPv6. However, the design of IPv6 is incompatible with that of its predecessor IPv4 and slows down the development of the IPv4-to-IPv6 migration. Several transitioning mechanisms have been proposed to attain the compatibility of IPv4 and IPv6 to bridge the gap between these two heterogeneous protocols. The two protocols would need to coexist continually before IPv6 completely takes over IPv4. However, the existing captive portal authentication systems generally do not support IPv4/IPv6 dual-stack authentication and lack one-time dual-stack authentication solutions. Upgrading the authentication system has become an urgent problem to be addressed. This study presents dual-stack network management strategies using a novel one-time authentication mechanism for large and complex dual-stack network environments. The proposed authentication system resolves the inconvenience of separate IPv4 and IPv6 authentication and effectively improves the compatibility of the two protocols. Furthermore, authenticating both IPv4 and IPv6 increases the traceability of traffic logs when security attacks occur. The proposed solution is deployed in a campus dormitory environment, and the feasibility and stability are successfully verified.

RPL, the standard IPv6 routing protocol for low-power and lossy networks in the emerging Internet of things (IoT), is designed mainly for efficient many-to-one data collection scenarios where the majority of the traffic flows from embedded devices to a gateway. Although RPL does support root-to-node downwards routing and peer-to-peer (P2P) communication, its P2P performance is inefficient and unsatisfactory due to excessively high churn and bottlenecks in the P2P path. However, P2P routing is important for machine-to-machine communication where nodes in IoT applications communicate with one another and control devices beyond simply collecting data. In this work, we propose a neighbor-graph-based RPL (NG-RPL) that significantly improves P2P routing performance. By including additional routing information when a packet passes through the root node for the first time in a P2P communication, NG-RPL finds efficient P2P routes opportunistically, when available, without significant overhead. We implement NG-RPL in Contiki-NG and evaluate its performance through extensive Cooja simulations. Results show that NG-RPL reduces routing churn, which improves packet reception ratio, round-trip time, and energy usage of P2P communication compared to standard RPL.

Muchas aplicaciones en Internet de las Cosas requieren nodos portátiles para transmitir video de buena calidad, durante largos períodos, con conectividades móviles y alimentadas por baterías. Maximizar el tiempo de funcionamiento de los nodos portátiles que usan baterías es un desafío hoy en día. Se presentan los resultados de la evaluación del tiempo de funcionamiento de un nodo inalámbrico de pequeño tamaño que usa baterías y transmite video a través de IPv6 a dispositivos conectados a Internet. Se presentan las herramientas utilizadas para la implementación, la configuración de los elementos prototipo y las descripciones de los diferentes escenarios. La corriente y el voltaje de funcionamiento del nodo se miden para calcular la energía consumida y el tiempo de funcionamiento del nodo. El tiempo calculado se compara con el tiempo medido en un entorno real, para validar las expresiones simples utilizadas para evaluar el tiempo de funcionamiento de un nodo.

The development background of SD-WAN and the current SD-WAN scheme based on IPv4 was introduced,the scheme of applying IPv6 to SD-WAN scenario was put forward,the changes that need to be made at the existing underlay and overlay levels to realize the SD-WAN scheme based on IPv6 were analysed,and the feasibility of using IPv6 technology to realize SD-WAN was discussed.

Nowadays,the state-of-the-art technologies can spend a very short time to scan the whole IPv4 space,but these methods cannot be applied to the huge IPv6 space easily.Therefore,many researchers propose different heuristic algorithms for the sake of IPv6 scanning.The common way of these algorithms is to input collected IPv6 seed addresses and output new most likely active IPv6 addresses as candidates for later scanning.These methods greatly reduce the scanning range of the active address area.These technologies based on seed addresses were classified,analyzed and summarized,and detailed analysis of the advantages and disadvantages of each method was given.And the several challenges faced by the methods were discussed.73M seed addresses were collected in total from two sources,including published IPv6 datasets in papers and Beijing Node of China Education and Research Network.Through the proposed experiments,time performance and hit rate of four IPv6 address scanning technologies based on seed addresses was compared.Finally,the own thoughts on this field and some future research directions were proposed.

As the network scale grows,it is especially important to fine-tune the network.In the next-generation Internet,embedding the user's trusted identity into the IPv6 address suffix to assign trusted addresses can further improve the traceability of network behavior.At present,many studies have attempted to embed the user’s identity information into IPv6 addresses based on portal authentication and DHCPv6,but the modification of DHCPv6 makes it not transparent to the terminal.A mechanism for trusted address assignment in IPv6 networks based on portal authentication was proposed.The collaboration between servers and software-defined networking (SDN) technology was used to realize the indirect assignment of IPv6 trusted addresses.Finally,a prototype system was implemented and its feasibility and performance were evaluated in the network of Nanjing Telecom in Jiangsu.The results show that the mechanism only brings little overhead and it is transparent to the terminal.

Faced with the new business needs and complex market environment,traditional manual methods can no longer meet the existing needs,and more intelligent solutions are urgently needed.With the development of artificial intelligence and big data technology,IBN has become a means to solve the current problem.The background and research progress of the IBN were introduced,and the application of the IBN in the next generation internet was analyzed.

The Internet of things is a popular concept in the current digital revolution. Nowadays, devices worldwide can be connected to the Internet, enhancing their communication, capabilities, and intelligence. Low-Power Wireless Personal Area Network (6LoWPAN) was specifically designed to build wireless networks for IoT resource-constrained devices. However, 6LoWPAN is susceptible to several security attacks. The fragmentation mechanism, in particular, is vulnerable to various attacks due to the lack of fragment authentication and verification procedures in the adaptation layer. This article provides a survey of fragmentation attacks and available countermeasures. Furthermore, the buffer reservation attack, one of the most harmful fragmentation attacks that may cause DoS, is studied and simulated in detail. A countermeasure for this attack is also implemented based on a reputation-scoring scheme. Experiments showed the harmful effects of the buffer reservation attack and the effectiveness of the implemented reputation-scoring countermeasure.

Internet Protocol version 6 (IPv6) and its core protocol, Internet Control Message Protocol version 6 (ICMPv6), need to be secured from attacks, such as Denial of Service (DoS) and Distributed DoS (DDoS), in order to be reliable for deployment. Several Intrusion Detection Systems (IDSs) have been built and proposed to detect ICMPv6-based DoS and DDoS attacks. However, these IDSs suffer from several drawbacks, such as the inability to detect novel attacks and a low detection accuracy due to their reliance on packet-based traffic representation. Furthermore, the existing IDSs that rely on flow-based traffic representation use simple heuristics features that do not contribute to detecting ICMPv6-based DoS and DDoS attacks. This paper proposes a flow-based IDS by enriching the existing features with a set of new features to improve the detection accuracy. The flow consists of packets with similar attributes (i.e., packets with the same source and destination IP address) and features that can differentiate between normal and malicious traffic behavior, such as the source IP address’s symmetry and the whole flow’s symmetry. The experimental results reveal that the enriched features significantly improved the IDS’s detection accuracy by 16.02% and that the false positive rate decreased by 19.17% compared with state-of-the-art IDSs.

Copyright of Telecommunications Science is the property of Beijing Xintong Media Co., Ltd. and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Copyright of Telecommunications Science is the property of Beijing Xintong Media Co., Ltd. and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

The transfer of IPv6 packets over the low-power personal area network (6LoWPAN) using IPv6 routing protocol enables small devices with limited processing power to transmit wirelessly. Privacy enabled disjoint and dynamic address auto-configuration (PeDAAC) is one of the 6LoWPAN protocols designed to ensure the privacy of the nodes by changing IPv6 and MAC addresses. One of the main purposes of this protocol is to keep the identity of the sender and receiver secret, so it can have different applications, such as hiding the identity of patients in the hospital or military applications to send data anonymously. PeDAAC is a dynamic protocol whose purpose is to create a conflict-free, auto-configuring IPv6 addressing scheme, eliminating the need for duplicate address detection. It results in lower latency and optimal communication costs, and the IPV6 addresses of each node will be unique. Two successful attacks on the PeDAAC protocol are discussed in this paper. An adversary can attack the availability of the nodes and can cause a denial of service attack. Also, by detecting the node's identity, changes over time can gather more messages, which increases the likelihood of successful eavesdropping. The greatest common divisor-based lightweight improvement (GCDLi) is a proposed lightweight extension of this paper to PeDAAC protocol to protect against these attacks. Beyond that, it counteracts two types of security threats: eavesdropping and denial of service attack. The proposed extension of the protocol improves the privacy and anonymity of the nodes. The time complexity of the proposed method is θ log n , and due to the limited range of input values (maximum 16 bit), it is considered a lightweight improvement. [ABSTRACT FROM AUTHOR]

Internet Protocol version 4 (IPv4) addresses are now in short supply. Because of IPv6's strong features and limitations, many Internet Service Providers (ISPs), researchers, and end users are transitioning from IPv4 to IPv6. For ordinary users, many tunnelling strategies have been used to move to IPv6. These strategies, on the other hand, produce a slew of challenges, including compatibility, complexity, connectivity, and traffic. Because devices do not support IPv6 addresses directly, they are unable to connect with each other due to the distinct header structure and incompatibility of IPv4 and IPv6. The network's performance is also being harmed as a result of the massive increase in data transmission volume. In this study, we suggest merging two tunnelling approaches, IPv6 Rapid Deployment (6RD) and Teredo, to give complete IPv6 connectivity while also improving network performance. Jumbo frames are used to carry large amounts of data to boost network throughput. The primary goal of combining the two methodologies is to create a hybrid network rendering that supports full IPv6 connectivity. Not only does the suggested solution support IPv6, but it also improves network performance. According to simulation results, throughput and packet delivery ratio increase by 9000 bytes and 98 percent, respectively. [ABSTRACT FROM AUTHOR]

Nowadays, it has become necessary to be able to be reachable at any place on the planet, and at any time "Any where, Any time, Any place". While the current version of Internet Protocol 4 (IPv4) cannot provide a sufficient number of unique IP addresses for all users of the Internet. It is for this reason IPv6 was developed to meet a greatly increased demand from a wide range of users of IP networks. On the other hand, the complexity of the Internet and its enormous size prolong the transition from the IPv4 process to the IPv6 process. Therefore, a cohabitation phase between the two versions is necessary. The key contribution of this paper is to present a study of the impact of the transition from IPv4 to IPv6 based on the tunneling mechanism in mobile environments. [ABSTRACT FROM AUTHOR]

In networking, one major difficulty that nodes suffer from is the need for their addresses to be generated and verified without relying on a third party or public authorized servers. To resolve this issue, the use of selfcertifying addresses have become a highly popular and standardized method, of which Cryptographically Generated Addresses (CGA) is a prime example. CGA was primarily designed to deter the theft of IPv6 addresses by binding the generated address to a public key to prove address ownership. Even though the CGA technique is highly effective, this method is still subject to several vulnerabilities with respect to security, in addition to certain limitations in its performance. In this study, the authors present an intensive systematic review of the literature to explore the technical specifications of CGA, its challenges, and existing proposals to enhance the protocol. Given that CGA generation is a time-consuming process, this limitation has hampered the application of CGA in mobile environments where nodes have limited energy and storage. Fulfilling Hash2 conditions inCGAis the heaviest andmost timeconsuming part of SEND. To improve the performance of CGA, we replaced the Secure Hash Algorithm (SHA1) with the Message Digest (MD5) hash function. Furthermore, this study also analyzes the possible methods through which aCGAcould be attacked. In conducting this analysis, Denial-of-Service (DoS) attacks were identified as the main method of attack toward the CGA verification process, which compromise and threaten the privacy of CGA. Therefore, we propose some modifications to the CGA standard verification algorithm to mitigateDoS attacks and to make CGAmore security conscious. [ABSTRACT FROM AUTHOR]

Copyright of Ingeniería Solidaria is the property of Universidad Cooperativa de Colombia and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Para resolver problemas de gran complejidad como la renderización de volúmenes se utilizan sistemas de cómputo paralelos con una elevada potencia de cómputo. En este trabajo se presenta la implementación de un sistema de comunicaciones orientado al mejor esfuerzo, energéticamente eficiente y tolerante a fallas para resolver la renderización fotorrealista en tiempo real. A fin de conseguir estos objetivos se propone un sistema que utiliza en capa de Transporte UDP, en capa de Red IPv6 (unicast - multicast) y en capa de Enlace de Datos Gigabit Ethernet con control de flujo. Al final exponemos algunos resultados experimentales.

The growing complexity of the Internet of Things (IoT) solutions along with highly increased application needs call for more complex and robust networking solutions. Especially the importance of autonomic, self-configuration capabilities becomes particularly significant. The IPv6-based mobile ad hoc networks are envisioned to be a good candidate technology for the IoT networks. However, they lack efficient address auto-configuration mechanisms, which could extend the IPv6 to cover the requirements of such a demanding networking environment. To address this challenge, we have proposed the Neighbor Discovery ++ (ND++) solution for the enhanced stateless address auto-configuration. The ND++ incorporates a well-performing flooding control mechanism to the basic IPv6 ND design, which results in a very low protocol overhead in the order of few messages per node. The presented simulation-based evaluation, performed under diversified mobile scenarios, confirms the scalability and robustness of this approach with regard to the key identified metrics-reliability, overhead, and latency.

Full digital connectivity of the Internet of Things (IoT) devices demands several requirements including high-speed networks and a large number of IP addresses. The long term evolution (LTE) and very high throughput (VHT) 802.11ac networks are among the alternatives that can fulfill the speed requirements. To provide a large number of IP addresses, in addition to IPv4, LTE and 802.11ac also support IPv6. However, while the full digital connectivity cannot be fulfilled by IPv4 due to its limited address space and failure to support the scalability of the IoT applications, another major problem is that the potential benefits of IPv6 for LTE and 802.11ac mobile networks are completely ambiguous. The issue is further increased along with the design complexities inherent in LTE and 802.11ac infrastructures. Therefore, there are increasing concerns for cellular carriers and mobile service providers regarding migration to IPv6-only and whether the users in LTE-IPv6-only and 802.11ac-IPv6-only networks can achieve better performance than IPv4. To address the challenges associated with deploying IPv6-only in LTE and 802.11ac networks and quantify the performance, this work proposes a model. The model consists of a simulation environment with four distinct networks: LTE-IPv6-only, LTE-IPv4-only, 802.11ac-IPv6-only, and 802.11ac-IPv4-only. The model is further extended by setting up a real-world testbed environment to include four networks for replication of those simulations. To assure the most comprehensive environmental evaluation of the model, 128 distinct scenarios are developed and implemented, and the results are obtained in terms of quality of service parameters. The testbed results are compared to those of simulations to precisely assess the model.

Kevin Ashton coined the phrase Internet of Things in 1999 with high performance implementation for corporate and social world. Thanks to the success of high-performing Internet of Things (IoT) whereby the tags and sensors are the foundation for IoT implementation of radio frequency identification with enormous implementation patterns. Real world objects and systems that are remotely managed using program- based tools may be outfitted with RFID tags. Radio frequency recognition devices may identify objects and sense information. Very thin micro-sized RFID chips that can attach remotely are built. The internet of things will cross over USD 267 billion in 2020. According to the report by Gartner, there would be $273 billion linked devices around the world in 2014. The quantity, which is equal to 8.4 billion goods, is 31% more than last year. This study examines security and productivity in the IoT. It is very popular to use Internet of Things (IoT) in robotics because of sensor sensors, advanced wireless technology and use of software programming. Both wireless IP-based systems come with built-in GPS modules. The utility of smart cities and home automation was increasingly accentuated by the appearance of vast databases of smart IP-based sensors. Within the scope of this study, one of the goals is to establish simulation trends that can cover protection weakness of the Internet of Things. In the novel, the simulation processes were implemented through Contiki Cooja and CupCarbon. The modern age is greatly being affected by impossibly sophisticated technical devices. It is treated under the umbrella of Internet of Things (IoT). Several applications are commonly using IoT linked technologies to a broad variety of purposes. IoT contains many other concepts such as universal computing, widespread computing, ambient computing, among several others. The work presents the implementation using high performance framework for the security in the IoT environment using security mechanism on IPv6.