Search

Many organizations nowadays have multiple sites at different geographic locations. Typically, transmitting massive data among these sites relies on the interconnection service offered by ISPs. Segment Routing over IPv6 (SRv6) is a new simple and flexible source routing solution which could be leveraged to enhance interconnection services. Compared to traditional technologies, e.g., physical leased lines and MPLS-VPN, SRv6 can easily enable quick-launched interconnection services and significantly benefit from traffic engineering with SRv6-TE. To parse the SRv6 packet headers, however, hardware support and upgrade are needed for the conventional routers of ISP. In this paper, we study the problem of SRv6 incremental deployment to provide a more balanced interconnection service from a traffic engineering view. We formally formulate the problem as an SRID problem with integer programming. After transforming the SRID problem into a graph model, we propose two greedy methods considering short-term and long-term impacts with reinforcement learning, namely GSI and GLI. The experiment results using a public dataset demonstrate that both GSI and GLI can significantly reduce the maximum link utilization, where GLI achieves a saving of 59.1% against the default method.

In this paper, we uncover a new off-path TCP hijacking attack that can be used to terminate victim TCP connections or inject forged data into victim TCP connections by manipulating the new mixed IPID assignment method, which is widely used in Linux kernel version 4.18 and beyond. Our attack has three steps. First, an off-path attacker can downgrade the IPID assignment for TCP packets from the more secure per-socket-based policy to the less secure hash-based policy, thus building a shared IPID counter that forms a side channel in the victim. Second, the attacker detects the presence of TCP connections by observing the side channel of the shared IPID counter. Third, the attacker infers sequence and acknowledgment numbers of the detected connection by observing the side channel. Consequently, the attacker can completely hijack the connection, e.g., resetting the connection or poisoning the data stream. We evaluate the impacts of our attack in the real world, and we uncover that more than 20% of Alexa top 100k websites are vulnerable to our attack. Our case studies of SSH DoS, manipulating web traffic, and poisoning BGP routing tables show its threat on a wide range of applications. Moreover, we demonstrate that our attack can be further extended to exploit IPv4/IPv6 dual-stack networks on increasing the hash collisions and enlarging vulnerable populations. Finally, we analyze the root cause and develop a new IPID assignment method to defeat this attack. We prototype our defense in Linux 4.18 and confirm its effectiveness in the real world.

In this paper, an experimental investigation is conducted to study the performance of the educational research domain name system (ER-DNS) hierarchical server network which works on internet protocol version 6 (IPv6) only, instead of the publicly available dual stack DNS root servers on the internet. There is a high probability of making the entire internet system unstable if any changes are made. Thus, we have created the experimental testbed, which functions similar to the existing live internet systems. It thus gives more flexibility to experiment and make technical and operational changes, without risking the stability and reliability of the internet system. In this paper, we have setup the entire DNS hierarchy starting from the root to the recursive servers with the top level domain (TLD) and domain authoritative name servers has been setup. This setup enables the queries to flow from the end user recursive servers to the domain authoritative server via the root as well as the TLD servers and provide the result to the end user. Query response in each of these servers were recorded to derive the response time, failure and successes to help in assessing the efficiency, behavior, functionality, stability and reliability of the ER-DNS architecture in IPv6 networks.

At present, telecommunications networks work under the operation of the IPv4 protocol, when creating and implementing this protocol, there was not such a large growth that it would have, for this reason the exhaustion of IP addressing is reflected, for this it was necessary to create of a new protocol that fulfills the function of slightly solving said depletion in IP addresses and thus being able to contemplate the demand for it. The IPv6 protocol was designed in order to be able to meet the addressing needs in the network and to be able to make a transition between IPv4 and IPv6, thus allowing the coexistence of both protocols in a network. This project is focused on the importance of implementing the Migration of the IPv4 to IPv6 protocols in the wireless networks of small and medium-sized companies, taking into account the guidelines presented by the Ministry of Information and Communication Technologies (MinTIC) as also the knowledge adopted on these protocols, allowing any organization to determine its adoption plan to IPv6 in such a way that it does not affect the availability of its network. 1. Introducción ……………………………………………………………….. 10 1.1 Área Temática ………………………………………………………… 11 1.2 Descripción …………………………………………………………….. 12 1.3 Objetivos ……………………………………………………………….. 13 1.3.1 Objetivo General ………………………………………………. 13 1.3.2 Objetivos Específicos ………………………………………….. 13 1.4 Justificación ……………………………………………………………. 13 1.5 Alcance del Proyecto …………………………………………………... 15 1.6 Fundamentación Teórica ……………………………………………… 16 1.7 Antecedentes …………………………………………………………… 17 1.7.1 Migración de IPv4 a IPv6 en Colombia ……………………… 19 1.7.2 Escenarios de migración ………………………………………. 22 1.8 Ventajas y Desventajas del Protocolo IPv6 …………………………... 22 1.8.1 Ventajas del Protocolo IPv6 …………………………………... 22 1.8.2 Desventajas del Protocolo IPv6 ……………………………….. 23 2. Método de Investigación …………………………………………………... 23 2.1 Plan de Investigación ………………………………………………...... 23 2.2 Recolección de Datos …………………………………………………... 23 3. GUÍA PARA EL MODELO DE SISTEMÁTICO DE MIGRACIÓN DEL PROTOCOLO IPV4 A IPV6 EN PEQUEÑAS Y MEDIANAS EMPRESAS 3.1 Fase 1 – Planeación ………………………………………………….… 29 3.2 Fase 2 – Implementación ……………………………………………... 31 3.3 Fase 3 – Prueba ………………………………………………………… 33 En la actualidad las redes de telecomunicaciones trabajan bajo el funcionamiento del protocolo IPv4, al crear e implementar este protocolo, no se contaba con crecimiento tan grande que tendría, por esta razón se ve reflejado el agotamiento de direccionamiento IP, para ello fue necesaria la creación de un nuevo protocolo que cumpla con la función de solventar un poco dicho agotamiento en direcciones IP y así poder contemplar la demanda del mismo. El protocolo IPv6 fue diseñado con el fin de poder suplir las necesidades de direccionamiento en la red y poder realizar una transición entre IPv4 e IPv6, permitiendo así la coexistencia de ambos protocolos en una red. Este proyecto está enfocado en la importancia de implementar la Migración de los protocolos IPv4 a IPv6 en las redes inalámbricas de las pequeñas y medianas empresas, teniendo en cuenta los lineamientos presentados por el Ministerio de las Tecnologías de la Información y las Comunicaciones (MinTIC) como también los conocimientos adoptados sobre estos protocolos, permitiendo que cualquier organización pueda determinar su plan de adopción a IPv6 de manera tal que no afecte la disponibilidad de su red. Pregrado Ingeniero(a) de Sistemas Monografías

IPv6 Routing Protocol for Low-Power and Lossy Networks (RPL) is the standard network layer protocol for achieving efficient routing in IPv6 over Low-Power Wireless Personal Area Networks (6LoWPAN). Resource-constrained and non-tamper resistant nature of smart sensor nodes makes RPL protocol susceptible to different threats. An attacker may use insider or outsider attack strategy to perform Denial-of-Service (DoS) attacks against RPL based networks. Security and Privacy risks associated with RPL protocol may limit its global adoption and worldwide acceptance. A proper investigation of RPL specific attacks and their impacts on an underlying network needs to be done. In this paper, we present and investigate one of the catastrophic attacks named as a copycat attack, a type of replay based DoS attack against the RPL protocol. An in-depth experimental study for analyzing the impacts of the copycat attack on RPL has been done. The experimental results show that the copycat attack can significantly degrade network performance in terms of packet delivery ratio, average end-to-end delay, and average power consumption. To the best of our knowledge, this is the first paper that extensively studies the impact of RPL specific replay mechanism based DoS attack on 6LoWPAN networks., Comment: arXiv admin note: text overlap with arXiv:2302.12443

Internet of Things (IoT) is one of the fastest emerging networking paradigms enabling a large number of applications for the benefit of mankind. Advancements in embedded system technology and compressed IPv6 have enabled the support of IP stack in resource constrained heterogeneous smart devices. However, global connectivity and resource constrained characteristics of smart devices have exposed them to different insider and outsider attacks, which put users’ security and privacy at risk. Various risks associated with IoT slow down its growth and become an obstruction in the worldwide adoption of its applications. In RFC 6550, the IPv6 Routing Protocol for Low Power and Lossy Network (RPL) is specified by IETF’s ROLL working group for facilitating efficient routing in 6LoWPAN networks, while considering its limitations. Due to resource constrained nature of nodes in the IoT, RPL is vulnerable to many attacks that consume the node’s resources and degrade the network’s performance. In this paper, we present a study onvarious attacks and their existing defense solutions, particularly to RPL. Open research issues, challenges, and future directions specific to RPL security are also discussed. A taxonomy of RPL attacks, considering the essential attributes like resources, topology, and traffic, is shown for better understanding. In addition, a study of existing cross-layered and RPL specific network layer based defense solutions suggested in the literature is also carried out.

The 6TiSCH (IPv6 over the TSCH mode of IEEE 802.15.4e) Working Group released 6TiSCH Minimal Configuration (6TiSCH-MC) standard for 6TiSCH network bootstrapping. 6TiSCH-MC allocates only one shared cell per slotframe, known as minimal cell, to transmit all types of control packets. Our Markov Chain based probabilistic analysis reveals that few network parameters have high impact on the performance of 6TiSCH network formation due to increasing congestion in minimal cell with the increased number of nodes. This work aims to improve the 6TiSCH network formation process by reducing congestion in minimal cell. For this, the Trickle algorithm, which is used for controlling the rate of routing information carrying packet transmission is modified so that sufficient routing information can be provided without congesting the minimal cell. To reduce the congestion further, a slotframe window (SW) based adaptive scheme is proposed by which nodes are restricted to transmit their control packets frequently. The proposed dynamic Trickle algorithm and SW-based scheme are implemented on Contiki-NG and evaluated using FIT IoT-LAB testbed. The experimental results show that both the proposed schemes together improves the joining time and energy consumption of the pledges compared to the state-of-the-art schemes. Additionally, both the proposed schemes provide fair control packet transmission opportunity among the nodes in a network.

RPL (IPv6 Routing Protocol for Low power and Lossy Networks) is the pseudo-standard routing protocol for Internet of Things. RPL employs a customizable objective function to optimize the routing. The default objective functions used in RPL are i) OF0 (Objective Function Zero) and ii) MRHOF (Minimum Rank with Hysteresis Objective Function). The OF0 is based on the routing metric hop count, whereas the MRHOF uses the ETX metric. They both do not measure the actual link quality. The link quality is directly related to the reliability of the network. The quality of the link can be estimated through methods that are both hardware and software based. The software-based methods are easy to implement and to ensure the reliability of the network. There are different software-based link quality estimation methods; the prominent methods among them are ETX and Link Quality Level (LQL). The ETX is a method of approximation of the transmitted packets. It uses probe packets to predict the expected transmission count, and it may not accurately reflect the link quality. The proposed Link Quality-Based Objective Function (LQBOF) makes use of the LQL metric which provides better link estimation values than the ETX method. The proposed method intends to provide a more reliable routing based on the link quality. The LQL is estimated through a metric called Packet Reception Rate (PRR). The LQL is calculated and ranked as values from 1 to 7, reflecting the best and worst link quality, respectively. The estimated LQL value is linked with the default ETX in computing the best path. This method intends to increase the reliability of the network. The reliability of the objective function is evaluated with the performance metrics packet delivery ratio, power consumption, throughput, convergence time, control traffic overhead and hop count.

Internet connects people to people, people to machine, and machine to machine for a life of serendipity through a Cloud. Internet of Things networks objects or people and integrates them with software to collect and exchange data. The Internet of things (IoT) influences our lives based on how we ruminate, respond, and anticipate. IoT 2021 heralds from the fringes to the data ecosystem and panaches a comfort zone. IoT is overwhelmingly embraced by businessmen and consumers due to increased productivity and convenience. Internet of Things facilitates intelligent device control with cloud vendors like Amazon and Google using artificial intelligence for data analytics, and with digital assistants like Alexa and Siri providing a voice user interface. Smart IoT is all about duplex connecting, processing, and implementing. Centralized IoT architecture is vulnerable to cyber-attacks. With Block Chain, it is possible to maintain transparency and security of the transaction's data. Robotic Process Automation (RPA) using bots has automated laborious tasks in 2019. Embedded Internet using Facial Recognition could reduce the coronavirus pandemic crisis by making a paradigm shift from fingerprint sensors to facial recognition. Security concerns are addressed with micro-segmentation approaches. IoT, an incredible vision of the future makes systems adaptive with customized features, responsive with increased efficiency, and procurable with optimized cost. This research delivers a comprehensive insight into the technical perspectives of IoT, focusing on interoperability, flexibility, scalability, mobility, security, transparency, standardization, and low energy. A smart classroom is implemented based on the concepts of IoT.

The internet protocols are increasingly imposed in recent times, there is a need to propose a study on the performance analysis on OSPFV3 and EIGRP in IPV6 application. IP is currently involved in sensitive areas of internet protocols, remote sensing, telepresence, computer networks and so on. The IP exists in two versions (IPv4 and IPv6), the difference between these two protocols is distinguished in terms of features, operation, and performance. In this study, measuring and evaluation on the performance of the two IPv4 and IPv6 protocols in the networks of communicating companies are proposed for further studies based on the literature gaps identified. The study should be performed by varying the routing protocols RIP, RIPnG, OSPF, OSPFv3, IS-IS and ISIS v6. Further studies should conduct simulation on performance analysis of OSPFV3 and EIGRP in IPV6 applications. The gaps identified after reviewing a number of literature on OSPFV3 and EIGRP with IPV6 network needs to be done since it sought to bridge gaps in literature.

Traffic lights need to be smarter to increase safety of vehicles, traffic efficiency, and fairness. We introduce a novel thread-based virtual traffic light system for traffic management. The traditional traffic light control systems use predetermined time intervals. These permanent traffic light controllers are less efficient due to their lack of adjustability. Thread is a secure and future-proof IPv6-based low-power mesh networking platform for IoT gadgets. For this protocol to work, all vehicles must have hardware that forms a mesh network using thread protocol (VANET). The key associated topics are explored in detail, apart from the algorithm description. Simulation results have also shown a higher delivery rate and lower delay time during vehicle-to-RSU packet exchange when using thread-based VTL. With our design, the thread based VTL (TVTL) delivery and delay time are perfectly matched, making TVTL an effective solution for traffic light systems.

Going wireless is one of the key industrial trends, which assists the emergence of new manufacturing and maintenance processes by reducing the complexity and cost of physical equipment. However, the adoption of Wireless Sensor Networks (WSNs) in production environments is limited due to the strict Quality of Service (QoS) requirements of industrial applications. In particular, Wireless Avionics Intra-Communication (WAIC) systems operating in 4.3 GHz band are designed for intra-aircraft use cases with considerable restrictions on the transmission power of sensors, which results in multi-hop topologies, complicating a guaranteed QoS. The Internet Engineering Task Force (IETF) has developed the protocol stack IPv6 over the Time Slotted Channel Hopping (TSCH) mode of IEEE 802.15.4 (6TiSCH) based on the IEEE 802.15.4 Standard for Low-Rate Wireless Networks, which combines the TSCH reliability with ubiquitous IPv6 connectivity and with the robust Routing Protocol for Low-Power and Lossy Networks (RPL). The Scheduling Function (SF) is a core IPv6 over the TSCH mode of IEEE 802.15.4 (6TiSCH) component, but the specification of the SF is an open research topic: numerous scientific articles investigated how QoS for a wide range of applications can be met by developing specialized SFs. However, no full-scale information exchange between the layers of the 6TiSCH stack was considered to optimize the SFs and to improve the network performance. In this work, we propose a novel solution named 6TiSCH-CLX to satisfy demanding QoS requirements using cross-layer communication. It is an extension of the 6TiSCH framework at the network and Medium Access Control (MAC) layers, addressing latency and reliability challenges agnostic of the physical layer. 6TiSCH-CLX is evaluated both analytically and in simulations for several safety-critical avionic intra-communication use cases in WAIC. Preliminary results indicate considerable improvements to latency, while maintaining almost 100% Packet Delivery Ratio (PDR) without retransmissions and they highlight the capability of the cross-layer approach compared to existing solutions.