Search

Current researches on NDP flooding behavior detection mainly focus on detecting RA flooding and NS flooding behaviors, and there is insufficient flooding detection for other messages of the NDP protocol. Moreover, traditional threshold rule detection methods suffer from poor dynamics and low accuracy, while most of the Al-based detection methods can only perform binary classification detection, and there are still challenges in performing multi-classification detection. In short, there is a lack of corresponding research in multi-classification flooding detection of all messages of NDP protocol. Therefore, this paper proposed a multi-classification detection framework for NDP protocol flooding behaviors, and proposed a flooding behavior detection method for NDP protocol based on time interval characteristics. The framework constructed the first multiclassification dataset for NDP flooding detection through the processes of traffic collection and data processing, it compared and used 5 machine learning and 5 deep learning algorithms to train the detection model. The experimental results show that the detection accuracy of the XGBOOST algorithm in machine learning can reach 99.18%, and the detection accuracy of the Transformer algorithm in deep learning can reach 98.45%. Compared with the existing detection methods, the accuracy is higher. Meanwhile, the detection framework can detect 9 types of flooding behaviors for all 5 types of messages of NDP protocol and classify the flooding behaviors into multiple types. [ABSTRACT FROM AUTHOR]

Internet Protocol version 6 (IPv6) is the most recent iteration of IP, designed to accommodate hundreds of thousands of devices with unique IP addresses. IPv6 introduces new features, such as the Neighbor Discovery Protocol (NDP) and Address Auto-configuration Scheme. For its effective operation, IPv6 relies on several protocols, including ICMPv6, which carries significant responsibilities. Similar to IPv4, IPv6 is susceptible to various attacks, including newer types like DDoS attacks executed via ICMPv6 messages, posing serious security and financial threats. Consequently, an Intrusion Detection System (IDS) is essential to safeguard against these attacks. IDS continuously evolve to incorporate features that can accurately detect such threats. However, feature selection strategies, particularly bio-inspired algorithms, often yield incorrect subsets of features. During machine learning processes, these inaccuracies impede the detection accuracy of DDoS attacks using ICMPv6. Many Optimization Search Algorithms become trapped in local minima and fail to consider multi-objective approaches, resulting in suboptimal feature selection. To address this, optimizing a bio-inspired algorithm within an IPv6 network has been proposed. Specifically, hybridizing the MFPA algorithm with the PSO algorithm is suggested to enhance detection accuracy. The selected features are used to train the dataset with a Support Vector Machine (SVM) classifier. The proposed approach is evaluated using the ICMPv6 dataset on various attacks, demonstrating superior classification accuracy of 97.99 %. It also reduced the number of features from 19 to 8, showcasing its efficiency. [ABSTRACT FROM AUTHOR]

The majority of local IPv6 networks continue to remain insecure and vulnerable to neighbor spoofing attacks. The Secure Neighbor Discovery (SEND) standard and its concomitant Cryptographically Generated Addressing (CGA) scheme were accepted by large standard bodies to codify practical mitigations. SEND and CGA have never seen widespread adoption due to their complexities, obscurity, costs, compatibility issues, and continued lack of mature implementations. In light of their poor adoption, research since their standardization has continued to find new perspectives and proffer new ideas. The orthodox solutions for securing Neighbor Discovery have historically struggled to successfully harmonize three core ideals: simplicity, flexibility, and privacy preservation. This research introduces Voucher-Based Addressing, a low-configuration, low-cost, and high-impact alternative to IPv6 address generation methods. It secures the Neighbor Discovery address resolution process while remaining simple, highly adaptable, indistinguishable, and privacy-focused. Applying a unique concoction of cryptographic key derivation functions, link-layer address binding, and neighbor consensus on the parameters of address generation, the resolved address bindings are verifiable without the need for complex techniques that have hindered the adoption of canonical specifications. [ABSTRACT FROM AUTHOR]

Internet Protocol version 6 (IPv6) is the most recent iteration of IP, designed to accommodate hundreds of thousands of devices with unique IP addresses. IPv6 introduces new features, such as the Neighbor Discovery Protocol (NDP) and Address Auto-configuration Scheme. For its effective operation, IPv6 relies on several protocols, including ICMPv6, which carries significant responsibilities. Similar to IPv4, IPv6 is susceptible to various attacks, including newer types like DDoS attacks executed via ICMPv6 messages, posing serious security and financial threats. Consequently, an Intrusion Detection System (IDS) is essential to safeguard against these attacks. IDS continuously evolve to incorporate features that can accurately detect such threats. However, feature selection strategies, particularly bio-inspired algorithms, often yield incorrect subsets of features. During machine learning processes, these inaccuracies impede the detection accuracy of DDoS attacks using ICMPv6. Many Optimization Search Algorithms become trapped in local minima and fail to consider multi-objective approaches, resulting in suboptimal feature selection. To address this, optimizing a bio-inspired algorithm within an IPv6 network has been proposed. Specifically, hybridizing the MFPA algorithm with the PSO algorithm is suggested to enhance detection accuracy. The selected features are used to train the dataset with a Support Vector Machine (SVM) classifier. The proposed approach is evaluated using the ICMPv6 dataset on various attacks, demonstrating superior classification accuracy of 97.99 %. It also reduced the number of features from 19 to 8, showcasing its efficiency.

The majority of local IPv6 networks continue to remain insecure and vulnerable to neighbor spoofing attacks. The Secure Neighbor Discovery (SEND) standard and its concomitant Cryptographically Generated Addressing (CGA) scheme were accepted by large standard bodies to codify practical mitigations. SEND and CGA have never seen widespread adoption due to their complexities, obscurity, costs, compatibility issues, and continued lack of mature implementations. In light of their poor adoption, research since their standardization has continued to find new perspectives and proffer new ideas. The orthodox solutions for securing Neighbor Discovery have historically struggled to successfully harmonize three core ideals: simplicity, flexibility, and privacy preservation. This research introduces Voucher-Based Addressing, a low-configuration, low-cost, and high-impact alternative to IPv6 address generation methods. It secures the Neighbor Discovery address resolution process while remaining simple, highly adaptable, indistinguishable, and privacy-focused. Applying a unique concoction of cryptographic key derivation functions, link-layer address binding, and neighbor consensus on the parameters of address generation, the resolved address bindings are verifiable without the need for complex techniques that have hindered the adoption of canonical specifications.

The shift towards IPv6 has led to the emergence of various IPv4-as-a-Service (IPv4aaS) transition technologies that allow the provisioning of IPv4 connectivity over IPv6 networks. The six main IPv4aaS mechanisms – 464XLAT, DS-Lite, Lightweight 4over6, MAP-E, MAP-T, and D4across6 – are compared in this study. We assess these protocols’ performance under a range of network situations using detailed simulation modeling in the ns-3 network simulator. With 100 nodes, we simulate an ISP-scale network architecture. We then configure several routing protocols, traffic patterns, connection delays, and implement each protocol according to its request for proposals. Different random seeds are used for each simulation run, and variables like packet sizes, routing protocols, and traffic loads are varied. The key performance parameters that are gathered are protocol overhead, packet loss, delay, and throughput. Important insights into the workings of each mechanism and how they tackle the problems of coexisting IPv4 and IPv6 under various network circumstances are provided by our thorough examination. The findings demonstrate how much better 464XLAT and D4across6 perform in most situations in terms of low latency, high throughput, minimal packet loss, and low overhead. This site may help network operators locate IPv4aaS solutions that meet their requirements and implementation procedures. Networking must alter transition technologies. This study improves comprehension of IPv4aaS protocols via trustworthy simulations. [ABSTRACT FROM AUTHOR]

The Internet of Things (IoT) is a system that enables wirelessly linked devices to be tracked and managed remotely. It uses Ethernet protocols and the principles behind wireless sensor networks. Soil moisture monitoring, hydraulic pressure monitoring, soil testing, preventing trespassing through motion detection, and conserving energy are only some of the agricultural and irrigational operations that are the subject of this research. The implementation shown in this work breaks down larger systems into several smaller ones. A subsystem incorporates a vibration warning sensor, pump, and the ability to monitor soil moisture and hydraulic pressure to detect movement in and around the associated field. The second method will be utilized to deter intruders by picking up on their presence when they move within range of the necessary field barrier. Sensors for measuring current and voltage will be included for energy management regulation. It will be utilized for controlling the system. The main system will receive data through ZigBee from the first and second subsystems, monitor them, and then transfer them to the network router via ZigBee, where the necessary data will be shown on a website home page alongside the appropriate Ethernet protocols and current operating data. [ABSTRACT FROM AUTHOR]

Copyright of Computer Measurement & Control is the property of Magazine Agency of Computer Measurement & Control and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Internet of Things (IoT) and Machine to Machine (M2M) frameworks needs a straightforward admittance to data through a consistent incorporation into the Future Internet. The mentioned integration leads to improper foundation and administrations by IoT. The Web of Things (WoT) on other hand aims at connectivity of web thereby pushing the technology down to the devices and smart things that leads to pushing its innovation down to gadgets and shrewd things. The rapid development in communication network in the modern era has made people's life more convenience and easier. Internet Protocol (IP) addresses need to be sufficient to handle demands of numerous entities that communicates with each other having an infrastructure or without having an infrastructure. The manuscript presents Routing Virtualization (RV), where all three transition techniques work in one common Cisco core router. It is known that, the global addressing in computers are provided by IP version 4 (IPv4). The address pool of IPv4 is almost depleted as there is an increase in the user's day by day. As its design has outlived, IP version 6 (IPv6) which is an advanced version was permitted for use. IPv6 is therefore called as the next generation IP (IPng) is chosen from many projected options as an appropriate standby for IPv4. In spite of the fact that IPv4 and IPv6 work on same protocol, there are differences in them such as routing, administrative workload, addressing, network address translation (NAT) and security. For having a smooth transition to IPv6, all the transition mechanisms are considered as a set of methods for the same; unfortunately, not all of them are amenable to the users' option. Routing Virtualization, where all three transition techniques work in one common Cisco core router, has been proposed and implemented. The present and future Internet offer adaptable, broad, steady furthermore, tried conventions for hub and administration revelation, versatility, auto-arrangement and security that are likewise required for the IoT. The IoT is integrated to the Internet by this way by adapting, expanding, and connecting IPv6 the current IoT giving IoT6. This maintains the keeping up of the reverse similarity with heritage that are arranged and are inserted in to the frameworks from building and mechanical robotization. [ABSTRACT FROM AUTHOR]

Copyright of Railway Signalling & Communication Engineering is the property of Railway Signalling & Communication Engineering and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Although wireless devices continuously gain communication capabilities, even state-of-the-art Industrial Internet of Things (IIoT) architectures, such as Internet Protocol version 6 over the Time-Slotted Channel Hopping (TSCH) mode of IEEE 802.15.4 (6TiSCH), continue to use network-wide, fixed link configurations. This presents a missed opportunity to (1) forego the need for rigorous manual setup of new deployments; and (2) provide full coverage of particularly heterogeneous and/or dynamic industrial sites. As such, we devised the Multi-Modal Minimal Scheduling Function (3MSF) for the TSCH link layer, which, combined with previous work on the routing layer, results in a 6TiSCH architecture able to dynamically exploit modern multi-modal hardware on a per-link basis through variable-duration timeslots, simultaneous transmission, and routing metric normalization. This paper describes, in great detail, its design and discusses the rationale behind every choice made. Finally, we evaluate three basic scenarios through simulations, showcasing both the functionality and flexibility of our 6TiSCH implementation. [ABSTRACT FROM AUTHOR]

Featured Application: This novel approach provides a seamless, straightforward means to make 6LoWPAN devices—pragmatically any kind of incumbent from IPv6-based IoT networks—more accessible under the scope of the omnipresent, classic IPv4 Internet. The burgeoning complexity and heterogeneity of IoT networks, coupled with their rapid growth, constant evolution, and new players, present significant challenges in terms of connectivity, interoperability, management, and usability. These networks, composed of a diverse array of devices, technologies and the like, demand innovative solutions to bridge the gaps between different IoT technologies and communication protocols. This article presents a simple, yet efficacious communication Relay to address one of these critical gaps. This Relay uses NB-IoT to ease the integration of 6LoWPAN-based IoT devices (IPv6) into the public legacy Internet (IPv4). This device translates 6LoWPAN, IPv6 CoAP messages into Internet-standard REST requests, so that appropriate handling of devices' data be achieved in several stages. Thus, the Relay establishes two branches of communications: (i) the local network where the 6LoWPAN gateway is placed, and (ii) the public NB-IoT network. User interaction and data analysis are achieved by virtue of Home Assistant, where former 6LoWPAN devices are now discovered and shown as proper Home Assistant entities thanks to the Relay's ease of integration into the open-source platform. This novel approach not only ensures efficient data and network management, but it also meets the urgent necessity for advanced solutions in enhancing actual IoT interconnectivity and monitoring. The unprecedented pace at which IoT devices, players and different networks have been proliferating in recent times is not compatible with countless manufacturer-dependent platforms, applications, and proprietary protocols that the IoT field has been leading with so far, almost from its beginnings. [ABSTRACT FROM AUTHOR]

RPL—Routing Protocol for Low-Power and Lossy Networks (usually pronounced "ripple")—is the de facto standard for IoT networks. However, it neglects to exploit IoT devices' full capacity to optimize their transmission power, mainly because it is quite challenging to do so in parallel with the routing strategy, given the dynamic nature of wireless links and the typically constrained resources of IoT devices. Adapting the transmission power requires dynamically assessing many parameters, such as the probability of packet collisions, energy consumption, the number of hops, and interference. This paper introduces Adaptive Control of Transmission Power for RPL (ACTOR) for the dynamic optimization of transmission power. ACTOR aims to improve throughput in dense networks by passively exploring different transmission power levels. The classic solutions of bandit theory, including the Upper Confidence Bound (UCB) and Discounted UCB, accelerate the convergence of the exploration and guarantee its optimality. ACTOR is also enhanced via mechanisms to blacklist undesirable transmission power levels and stabilize the topology of parent–child negotiations. The results of the experiments conducted on our 40-node, 12-node testbed demonstrate that ACTOR achieves a higher packet delivery ratio by almost 20%, reduces the transmission power of nodes by up to 10 dBm, and maintains a stable topology with significantly fewer parent switches compared to the standard RPL and the selected benchmarks. These findings are consistent with simulations conducted across 7 different scenarios, where improvements in end-to-end delay, packet delivery, and energy consumption were observed by up to 50%. [ABSTRACT FROM AUTHOR]

Studies on the delay characteristics under the Internet macro-topology provides a reference for resolving the real-time performance issue of the data transmission of Internet devices. With the overall advancement of IPv6 Internet deployment, the changes in network structure and paths will generate different degrees of delay. In this context, a comparative analysis of the behavioral characteristics of IPv4 and IPv6 network delay was performed in this study. We selected the sampled data of valid paths located at four monitors on different continents under the CAIDA_Ark project to obtain statistics for the network delay and communication diameter on the IPv4 and IPv6 Internet and found that their correlation was extremely weak. Furthermore, the communication diameter on IPv6 Internet was slightly shorter than that on IPv4 Internet. The network delay exhibited a bimodal or multimodal heavy-tailed distribution. The network delay and maximum link delay for IPv4 and IPv6 Internet were strongly correlated, indicating that the bottleneck delay affects the relationship between the network delay and communication diameter. Next, we analyzed the relationship between network delay and bottleneck delay for IPv4 and IPv6 Internet and found that bottleneck delay has a more significant impact on the network delay on the valid paths for IPv4 Internet than for IPv6 Internet. After mapping the IP addresses at both ends of the bottleneck delay to the Autonomous Systems (ASes), we found that the bottleneck delay on the valid paths for the IPv4 Internet was mostly distributed in the intra-AS, whereas it was in the inter-AS for the IPv6 Internet. Finally, we analyzed the factors affecting bottleneck delay and found that propagation delay in the long-distance range is an important factor (L > 4000 km on IPv4 Internet and L > 7000 km on IPv6 Internet). In addition, for IPv4 Internet, queuing delay is an important factor affecting bottleneck delay, whereas in the process of data communication on the IPv6 Internet, the impact of propagation and queuing delays on the bottleneck delay is weakened. [ABSTRACT FROM AUTHOR]

With the transition to IPv6, addressing constraints that necessitated a common security architecture under network address translation (NAT) are no longer present. Instead, manufacturers are now able to choose between an openmodel design, where devices are end-to-end reachable, or a more familiar closedmodel, where the home gatewaymay continue to serve as a perimeter security device. The potential for further nuance, such as differences in default access control policies, filtering behaviors, and IPv6 specific requirements, present an environment defined by ambiguity. For the consumer, the potential impact of these changes are unclear. To address this uncertainty, we taxonomize the present NAT-centric model of consumer gateway security through a survey of over 300 common vulnerabilities and exposures surrounding NAT and hole punching protocols. From this survey, we contextualize the limited security NAT has provided while serving as the primary perimeter defensemechanism in home networks. We further define how this baseline security model for consumer gateways is reflected in IPv6 through an assessment of ten commonly deployed consumer gateways. Our conclusion is that familiarity of a NAT-centric design is no longer assured for IPv6, requiring an active involvement by users to limit exposures within their home networks. [ABSTRACT FROM AUTHOR]

Summary: With the promotion and application of IPv6 in the world, there is a growing demand for IPv6 alias resolution. How to resolve IPv6 alias efficiently and accurately becomes an urgent problem to be solved. After analyzing the features of IPv6 addresses, this paper proposes a large‐scale adaptive IPv6 alias resolution method based on fingerprint information by combining Too‐Big Trick, UAv6, APD, and other alias resolution algorithms. It sends ICMPv6 probe packets to different types of IPv6 addresses to get the fingerprint information of target hosts. After filtering the classified addresses, our proposed alias resolution method is adaptively selected to resolve alias addresses. In the experiment, we use multi‐thread method to resolve the aliases of large‐scale IPv6 addresses, which greatly improves the efficiency of detection. Meanwhile, we use IPv6 datasets collected from the organizations RIPE and CAIDA. By comparing with Speedtrap and Too‐Big Trick, we confirm the accuracy of this method and obtain more alias pairs. [ABSTRACT FROM AUTHOR]

Summary: In the area of wireless communication technologies, 6LoWPAN leverages the extensive capabilities of IPv6, even within the constraints imposed by resource‐limited devices, particularly within wireless sensor networks (WSNs). The integration of 6LoWPAN into modern solutions for implementing the IPv6‐based Internet of Things (IoT) is becoming increasingly important. In this paper, a sensor monitoring and notification system specifically designed for deployment over 6LoWPAN has been proposed. Multipurpose capability, scalability, and ease of deployability are the main features of the proposed system. Its architecture reflects the highest degree of flexibility and allows for a variety of use cases encountered in practical scenarios. In addition, a web interface has been developed as part of the comprehensive system architecture. This interface enables efficient management of the entire system and facilitates connection for new users and seamless integration of additional sensors. By encapsulating complex functions in a user‐friendly interface, the system promotes accessibility, convenience, and an enhanced user experience. The proposed system overcomes the limitations of current approaches, thereby creating new opportunities. The flexibility of the proposed system allows it to be applied to various use cases. [ABSTRACT FROM AUTHOR]

Copyright of Pearl River is the property of Pearl River Editorial Office and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

With the advent of the Internet of Things (IoT) era, the application of intelligent devices in the network is becoming more and more extensive, and the monitoring technology is gradually developing towards the direction of intelligence and digitization. As a hot topic in the field of computer vision, face recognition faces problems such as low level of intelligence and long processing time. Therefore, under the technical support of the IoTs, the research uses internet protocol cameras to collect face information, improves the principal component analysis (PCA), poses a PLV algorithm, and then applies it to the face recognition system for remote monitoring. The outcomes demonstrate that in the Olivetti Research Laboratory face database, the accuracy of PLV is relatively stable, and the highest and lowest are 98 and 94%, respectively. In Yale testing, the accuracy of this algorithm is 12% higher than that of PCA algorithm; In the database of Georgia Institute of Technology (GT), the PLV algorithm requires a time range of 0.2–0.3 seconds and has high operational efficiency. In the selected remote monitoring face database, the accuracy of the method is stable at more than 90%, with the highest being 98%, indicating that it can effectively improve the accuracy of face recognition and provide a reference technical means for further optimization of the remote monitoring system.

In order to accurately mine outliers and reduce the impact of outliers on communication data, a multi-scale outlier mining algorithm for stateless communication data in IPv6 remote monitoring network was investigated.The stateless communication data were obtained through an IPv6 remote monitoring network, and based on the seasonality, trend, and self-similarity characteristics of the extracted stateless communication data, the Fourier transform was used to divide the stateless communication data into two classes.Then, the K-mean method was used to cluster the two classes to determine the neighborhood of the stateless communication data, which was used as the basis for outlier mining using a convolutional neural network on the stateless communication data.The convolutional neural network was initialized, and according to the output value of the convolutional neural network, it was determined whether the network met the stopping condition.The operation steps of the convolutional neural network were repeated, all the outlier points were mined, and the multi-scale outlier mining of stateless communication data was achieved.The experimental results showed that the fewer the number of stateless communication data categories, the higher the mining efficiency; the proposed method can accurately mine the number of multiscale outliers of stateless communication data in IPv6 remote monitoring network and accurately analyze the reasons for the outliers.

El espacio de direcciones IPv4 está a punto de llegar a su límite y podría colapsar, para corregir este evento muchos proponen que las redes existentes deberán realizar la migración definitiva a IPv6, tomando como referencia que este protocolo permitirá un mayor espacio de direcciones IP, brindando nuevas oportunidades y corrigiendo los problemas existentes en el protocolo de la versión anterior. Sin embargo, debido al aumento de la sobrecarga en IPv6 y su interacción con routers de borde y sistemas operativos que alojan este protocolo de comunicación, se pueden ocasionar evidentemente problemas de rendimiento en la red. El presente artículo se basa en una investigación cuantitativa utilizando un método que permite analizar el rendimiento de redes basadas en IPv6 con IPSec haciendo uso de la simulación con GNS3, con dicha herramienta compara resultados con tres escenarios típicos de implementación en relación a la topología original del presente trabajo, su evaluación determina la diferencia de rendimiento entre escenarios cuando se genera tráfico de una red a otra y se obtiene de entre ellos el un escenario con mejor estabilidad y rendimiento utilizando una metodología experimental, con lo que logramos constatar que su escenario homólogo con utilización de túneles en más óptimo en relación al propuesto en esta investigación, tomando en consideración que las métricas analizadas son ancho de banda, latencia y jitter.

Internet Protocol version 6 (IPv6) is the latest version of IP that goal to host 3.4 × 1038 unique IP addresses of devices in the network. IPv6 has introduced new features like Neighbour Discovery Protocol (NDP) and Address Auto-configuration Scheme. IPv6 needed several protocols like the Address Auto-configuration Scheme and Internet Control Message Protocol (ICMPv6). IPv6 is vulnerable to numerous attacks like Denial of Service (DoS) and Distributed Denial of Service (DDoS) which is one of the most dangerous attacks executed through ICMPv6 messages that impose security and financial implications. Therefore, an Intrusion Detection System (IDS) is a monitoring system of the security of a network that detects suspicious activities and deals with amassive amount of data comprised of repetitive and inappropriate features which affect the detection rate. A feature selection (FS) technique helps to reduce the computation time and complexity by selecting the optimum subset of features. This paper proposes a method for detecting DDoS flooding attacks (FA) based on ICMPv6 messages using a Binary Flower PollinationAlgorithm (BFPA-FA). The proposed method (BFPA-FA) employs FS technology with a support vector machine (SVM) to identify the most relevant, influential features. Moreover, The ICMPv6-DDoS dataset was used to demonstrate the effectiveness of the proposed method through different attack scenarios. The results show that the proposed method BFPAFA achieved the best accuracy rate (97.96%) for the ICMPv6 DDoS detection with a reduced number of features (9) to half the total (19) features. The proven proposed method BFPA-FAis effective in the ICMPv6 DDoS attacks via IDS. [ABSTRACT FROM AUTHOR]

Distributed Denial of Service (DDoS) attacks is a problem in computer networks. DDoS attacks pose a significant threat to internet networks as they cause congestion and disrupt the optimal functioning of servers. Detecting the source of these attacks is essential for effective protection. Therefore, in this study, we propose a hybrid strategy that combines Suricata, an intrusion detection system (IDS), with pfSense, a firewall, to address DDoS attacks. Suricata, the IDS, can identify the destination of the attack, which allows pfSense, the Firewall, to block the attack by dropping packets sent by the attacker. As a result, by leveraging this combined approach, we have observed significant improvements in the quality of service (QoS). The results of our study indicate a 1.08 % increase in throughput value, from 1881.97 bytes to 902.44 bytes, demonstrating improved efficiency in data transmission. Additionally, we observed a 57.32 % increase in the average total number of packets sent, from 1382 packets to 3238 packets, indicating better network performance. Furthermore, the proposed strategy significantly reduced delay and jitter values. The delay value decreased by 88.78 %, from 90.76 ms to 10.18 ms, and the jitter value decreased by 88.99 %, from 181.85 ms to 20.03 ms. These improvements signify a notable reduction in latency and packet timing variations, leading to a smoother network experience. Another crucial aspect we evaluated was the CPU utilization. The proposed strategy resulted in a substantial decrease in CPU utilization by 81.23 %, from 78.3 % to 14.7 %. The combination of pfSense and Suricata has proven to be a successful approach, providing robust protection against DDoS attacks, including those utilizing IPv6. This research can be implemented as a solution on a campus ad-hoc network with limited computers [ABSTRACT FROM AUTHOR]

The rapid development of information and communication technologies has increased the demand for internet-facing devices that require publicly accessible internet protocol (IP) addresses, resulting in the depletion of internet protocol version 4 (IPv4) address space. As a result, internet protocol version 6 (IPv6) was designed to address this issue. However, IPv6 is still not widely used because of security concerns. An intrusion detection system (IDS) is one example of a security mechanism used to secure networks. Lately, the use of machine learning (ML) or deep learning (DL) detection models in IDSs is gaining popularity due to their ability to detect threats on IPv6 networks accurately. However, there is an apparent lack of studies that review ML and DL in IDS. Even the existing reviews of ML and DL fail to compare those techniques. Thus, this paper comprehensively elucidates ML and DL techniques and IPv6-based distributed denial of service (DDoS) attacks. Additionally, this paper includes a qualitative comparison with other related works. Moreover, this work also thoroughly reviews the existing ML and DL-based IDSs for detecting IPv6 and IPv4 attacks. Lastly, researchers could use this review as a guide in the future to improve their work on DL and ML-based IDS. [ABSTRACT FROM AUTHOR]

In this paper, we focus on one of the most prominent IPv6 transition technologies, namely lw4o6 (Lightweight 4over6). We emphasize the uniqueness of lw4o6 and the difference between lw4o6 and the conventional DS-Lite (Dual-Stack Lite), their topology, functionality and security vulnerabilities. We analyze the potential vulnerabilities of lw4o6 infrastructure by applying the STRIDE threat modelling technique, which stands for Spoof- ing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. Moreover, we build a test-bed for lw4o6 using Snabb, which is an open source software. We test Snabb’s tunneling and binding capabilities and most importantly, port allocation per subscriber. At the end, we present multiple attacking scenarios (Denial of Service, Information Disclosure, Spoofing, etc.) against lw4o6’s main routers and come up with mitigation methods for such attacks. [ABSTRACT FROM AUTHOR]

Copyright of Telecommunications Science is the property of Beijing Xintong Media Co., Ltd. and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Although wireless devices continuously gain communication capabilities, even state-of-the-art Industrial Internet of Things (IIoT) architectures, such as Internet Protocol version 6 over the Time-Slotted Channel Hopping (TSCH) mode of IEEE 802.15.4 (6TiSCH), continue to use network-wide, fixed link configurations. This presents a missed opportunity to (1) forego the need for rigorous manual setup of new deployments; and (2) provide full coverage of particularly heterogeneous and/or dynamic industrial sites. As such, we devised the Multi-Modal Minimal Scheduling Function (3MSF) for the TSCH link layer, which, combined with previous work on the routing layer, results in a 6TiSCH architecture able to dynamically exploit modern multi-modal hardware on a per-link basis through variable-duration timeslots, simultaneous transmission, and routing metric normalization. This paper describes, in great detail, its design and discusses the rationale behind every choice made. Finally, we evaluate three basic scenarios through simulations, showcasing both the functionality and flexibility of our 6TiSCH implementation.

Past broadband adoption initiatives underscored common wisdom: “We cannot manage what we cannot accurately measure”, “Trust but verify”. Self-reported Federal Communications Commission data has been notoriously unreliable or lacking granularity and that led to an overoptimistic perception of the quality and coverage of broadband services. Data collected in the past was deficient in providing a complete view of the user experience by focusing exclusively on a simple metric, bandwidth availability. Moreover, data collected in the past typically provided a point-in-time perspective on the state of broadband services in each region. In this paper, we discuss a new set of metrics and measurement techniques needed to make broadband funding decisions efficient in terms of quality of services delivered and return on investment, and to track their progress. We propose composite metrics that capture the complete value of the service to the user and emphasize the feasibility of measuring and monitoring such a metric over time.

The increasing demand for Internet of Things (IoT) applications has resulted in vast amounts of data, requiring the utilization of big data analytics. The integration of big data analytics in IoT-based smart cities can greatly benefit from the development of wireless communication protocols, among which the Thread protocol has emerged as a promising option. Thread is IEEE 802.15.4 based and has advanced capabilities like mesh networking, IPv6 support, and multiple gateways providing no single point of failure. This paper presents the design and evaluation of a low-cost mesh network using Raspberry Pi, nRF52840 dongle, and OpenThread 1.2 (i.e., an open-source software implementation of the Thread protocol stack). The research elaborates on the hardware and software solutions used, as well as the network topologies adopted. To evaluate the performance of the developed system, extensive real-time tests are performed, considering parameters, such as jitter, packet loss, and round trip time. These tests effectively demonstrate the effectiveness of the Thread network. Furthermore, the impact of varying payload size and bitrate on the network is analyzed to understand its influence. The behavior of the multi-hop network is also examined under link failure scenarios, providing insights into the network's robustness. Our findings provide valuable insights for researchers interested in designing low-cost and efficient mesh networks for various IoT applications, including home automation, building/campus monitoring systems, distributed industrial IoT applications, and smart city infrastructure. [ABSTRACT FROM AUTHOR]