Address Configuration Research Articles

IPv6 addressing strategy with improved secure duplicate address detection to overcome denial of service and reconnaissance attacks

With technology development, the growing self-communicating devices in IoT networks require specific naming and identification, mainly provided by IPv6 addresses. The IPv6 address in the IoT network is generated by using the stateless auto address configuration (SLAAC) mechanism, and its uniqueness is ensured by the DAD protocol. Recent research suggests that IPv6 deployment can be a risky decision due to the existing SLAAC-based addressing scheme and the DAD protocol being prone to reconnaissance and denial of service (DoS) attacks. This research paper proposes a new IPv6 generation scheme with an improved secure DAD mechanism to address these problems. The proposed addressing scheme generates IPv6 addresses by taking a hybrid approach based on vendor id of medium access control (MAC) address, physical location, and arbitrary random numbers, which mitigates reconnaissance attacks by malicious nodes. To prevent the DAD process from DoS attacks, hybrid values of interface identifier (IID) are multicast instead of actual values. The proposed scheme is evaluated under reconnaissance and DoS attacks in the presence of malicious nodes. The evaluation results demonstrate that the proposed method effectively mitigates reconnaissance and DoS attacks, outperforming the EUI-64 and SEUI-64 schemes in terms of address success rate (ASR), energy consumption, and communication overhead. Specifically, the proposed method significantly reduces the average probing rate for scanning the existence of an IPv6 address, with only a 1% probing rate compared to SEUI-64’s 5% and EUI-64’s 100%. Furthermore, the additional communication overhead introduced by the proposed method is less than 13% and 11% compared to EUI-64 and SEUI-64, respectively. Additionally, the energy consumption required to assign an IPv6 address using the proposed method is lower by 12% and 5% when compared to EUI-64 and SEUI-64, respectively. These findings highlight the effectiveness of the proposed method in enhancing security and optimizing resource utilization in IPv6 addressing.

Building IPv6 addressing scheme using Hybrid Duplicate Address Detection to prevent Denial of Service Attack

Internet Protocol version 6 (IPv6) address configuration is needed to meet the needs of current portable devices and wearable applications, where each device needs its own unique identification number. High complexity in Wireless Sensor Network (WSN) and Internet of Things (IoT) environments has increased challenges, such as low energy consumption and high overhead in IPv6 address configuration. The proposed IPv6 generation is based on a hybrid mathematical approach that retains the IP address’s confidentiality and prevents Denial of Service (DoS) attacks from new and existing nodes in the network. In this paper, the proposed hybrid protocol for DoS attacks from new and existing nodes is analyzed. It is evident from the results that the rate of successful configuration, overhead, and energy consumption is found to be better than the existing approach, namely, Programming Protocol-independent Packet Processors Duplicate Address Detection (P4DAD), match prevention technique, etc.

Cisco Packet Tracer modeling in the course of computer networks

The computer networking course is usually taught in a mixed mode, which includes a lecture and a practical lesson, and in addition to a full-time theoretical lesson, students must take practical classes to evaluate technologies and content. Nevertheless, the abstractions of the computer networking course, such as the multilevel complexity of the TCP/IP network, the connection and configuration of client and server infrastructure, as well as the differences in static and dynamic configuration of IP addresses, set students a huge task to understand and master the basic concept of computer networking technologies. Thus, the approach based on the use of computer network modeling and visualization tools when teaching the computer networks course is considered useful for teachers and students. In this study, Cisco Packet Tracer computer network simulation software was used in the Computer Networking Course (KJ2212). Students (N=55) got acquainted with the Cisco Packet Tracer program, on the basis of which they developed a global network (WAN) consisting of personal computer (PC) configuration operations, servers and switches in accordance with the Cisco standard. Subsequently, with the help of a survey, the opinions of students and their understanding of the effectiveness of Cisco packet Tracer in teaching computer networks were studied. All feedback was statistically studied using SPSS 16.0. From the analysis of descriptive results, all students agreed that Cisco Packet Tracer successfully helped them understand several key concepts of computer networks and at the same time eliminate some abstractions they encountered during the course (N=32: totally agree; N=23: I agree). Cisco Packet Tracer has established itself as a modeling and visualization tool as an effective software that supports computer networking course training.networking course training.

Domain-Based Address Configuration for Vehicular Networks

Domain-Based Address Configuration for Vehicular Networks

Autonomous Wi-Fi Direct connectivity maintenance scheme

In the emergency situations, Wi-Fi Direct (WFD) can provide group-based communications between group owner (GO) and group members (GMs). However, when GO disappears voluntarily or involuntarily, the group connectivity is terminated. For the re-connection, a group reformation procedure including device discovery, GO negotiation, Wi-Fi protected setup (WPS), and address configuration is needed, which consumes much time. In addition, current WFD requires user intervention to initiate the group reformation. To mitigate this problem, this paper proposes an AWS: an Autonomous WFD connectivity maintenance Scheme. In AWS, GO determines a candidate GO (CGO) in advance and transmits the GO information including addresses and credentials to CGO. When GO disappears, based on the GO information, CGO activates virtual GO (VGO) that can operate exactly the same as the disappeared GO (e.g., with same addresses and operating channel). Simulation results are given to validate AWS and to show the performance of AWS in terms of the group disruption time.

Integrating digital solutions into national health data systems through public-private collaboration: An early experience of the SPICE platform in Kenya.

Public-private collaborative efforts to address healthcare challenges in low- and middle-income countries have been the focus of digital initiatives to improve both access and quality of health services. We report the early feasibility, experience, and learnings of migrating healthcare data generated from a proprietary, privately owned cloud-based environment into an on-premises National Health Data Center (NHDC) in compliance with Kenya's data management legislation. In 2018, Medtronic LABS entered into a partnership with the Kenya Ministry of Health and other stakeholders to improve access to quality services and data availability for non-communicable diseases (diabetes and hypertension), anchored on the SPICE digital health platform. Data migration from SPICE to the NHDC necessitated the establishment of multi-stakeholder coordination structures, alignment on system configuration requirements, provisioning of on-premises servers, data replication and monitoring. The data replication process showed consistency in format and content with no evidence of data loss. The monitoring of the server uptime and availability, however, exposed overall downtime of 15% of the total time tracked between April and December 2022 caused by Internet Protocol address configuration issues, power outages, firewall rule changes, and unscheduled system maintenance. Monthly tracked downtime however reduced from a high of 28% in April 2022 to 5% in December 2022. Our early experience shows that data migration from proprietary host environments to public "one-stop-shop" national data warehouses are feasible provided investments are made in the requisite infrastructure, software and human resource capacity to ensure long-term sustainability, maintenance, and scale to match cloud-based data hosting. Further, digital health solutions developed in collaboration with non-state actors can be integrated into national data systems, saving Governments the cost and efforts of building similar tools while leveraging private sector capacity.

Evaluation of Computer Network Simulation Applications to Support Online Learning

Computer network learning is learning that prioritizes practice compared to theory to be able to understand the material more clearly. Therefore, computer network learning requires real learning media to support learning effectiveness. However, because the cost of procuring computer network learning media is quite large, it is one of the main obstacles. By using a computer network simulator application is one way to overcome these obstacles. At this time there are several computer network simulator applications that can be used to support computer network learning activities to run efficiently. In this study, researchers evaluate and analyze several network simulation applications, to find out which applications are more efficient to use in learning computer networks, seen from the application capabilities in IP Address configuration, Subnetting, Routing. This study uses the observation method of computer network simulator applications that have been determined, namely the application of (1) Cisco Packet Tracer, (2) GNS3, (3) EVE-NG, (4) Boson Netsim, using the LORI research instrument version 1.5. This research has several stages, namely data collection, data reduction, scoring, data presentation, drawing conclusions and measured using a Likert scale. The results of this study indicate that the application (1) Cisco Packet Tracer ranks first with a value of 89.1%, (2) Boson Netsim is in second place with a score of 86.6%, (3) GNS3 ranks third with a value of 85.4%, (4) EVE-NG ranks fourth or lowest with a score of 83.3%.

Scalability Analysis of Privacy Enabled IPv6 Addressing Protocol for Duty Cycled 6LoWPAN

Background: The privacy enabled IPv6 addressing mechanism ensures the privacy of the node's identification in the communication messages. It makes it difficult for adversaries to track nodes and link any activities with the node's IP or the MAC address. Scalability of the privacy enabled IPv6 addressing scheme for 6LoWPAN may be affected due to underlying MAC layer mechanisms. Objective: Hence, this study aims to explore such an impact. Methods: Addressing scheme is implemented in the Contiki operating system which uses duty cycling at the MAC layer along with the CSMA channel access mechanism. ContikiMAC and CXMAC are widely used duty cycling protocols in Contiki. An analytical study is presented in this paper, which analyses the IPv6 address configuration delay with ContikiMAC and CXMAC. Simulation is performed to corroborate the presented analytical model. The address configuration latency limits the scalability of the network. Hence, this paper studies the impact of duty cycling of the nodes on the address configuration latency and estimates the size of a single hop PAN. Results & Conclusion: It is observed that the ContikiMAC duty cycling protocol can achieve better performance compared to the CXMAC protocol in terms of address configuration latency. In order to make up for the delay due to duty cycling, the network can be divided into multiple PANs of smaller sizes where the addressing process runs simultaneously.

A Survey on Geographic location routing and forwarding strategies of VANET and WSN based on NDN

Named-data Network (NDN) is a new network architecture, and its purpose is to achieve network architecture from the host-centric to the data-centric. NDN uses the data name of the application to communicate directly. Since the data name is defined by the application and unrelated to the connection, it relieves the need for IP address configuration, so as long as the physical connection exists, data exchange can occur. The NDN-based forwarding mechanism is very important for effective communication in Vechicle Ad-hoc Network (VANET) and Wireless Sensor Network (WSN). Location-based routing and forwarding utilizes the location information of neighboring nodes or destination nodes to improve the efficiency of routing search. The paper mainly discusses the geographical routing and forwarding strategies of NDN-based VANET and WSN and the existing problems, and proposes future challenges for NDN routing and forwarding.

Pseudonym Changing Strategy with Mix Zones Based Authentication Protocol for Location Privacy in Road Networks

A great advancement has been made in intelligent transportation system and communication technologies in order to exchange secure information between automobiles, facilities provider have led an frame over road network. The intelligent transportation system provides an efficient traffic system for drivers, so that there must be less risk to users. In order to design a secure communication protocol among V & V and V & I is a challenging problem. In order to reduce the chance of attacks and increase privacy level, crypto graphic tools provides the feasible solution. In this paper, we proposed pseudonym changing strategy with mix zones (1) Anonymous authentication: the message should be authenticated by issuer due to mix zone and cryptographic tools secure message without any attack. (2) Privacy: Communication contents are confidential due to encrypted messages during communications also improving the scalability through address configuration scheme to reduce computational cost. (3) Efficiency: low storage requirements, The velocity and distance factors may also consider secure measurement, message delivery, overhead and coverage,packet delivery rate, reduce latency and overhead not only by computation cost and time but also compared our scheme, fast delivery rate, low latency and maximum coverage in order to enhance privacy against malicious attacks.

Research on IPv6 address configuration strategy and deployment rule

With the advancement of the deployment of IPv6 networks, the security problems brought by IPv6 have become increasingly serious. In order to fully understand the security vulnerabilities and risks existing in the IPv6 space, it is necessary to detect and scan IPv6 addresses, especially server addresses. As IPv6 has greatly expanded the address space compared with IPv4, the traditional scanning method is no longer applicable, and the current research on scanning of IPv6 lacks an effective method. In this paper, we collect an IPv6 address data set based on passive traffic collection, and explore the rules of IPv6 address deployment using this data set. By exploring the different characteristics of addresses caused by different address configuration methods, we filter and classify addresses, perform statistics and analysis on different types of addresses, and give the current education network deployment rules for different address configuration methods, which will help the IPv6 address scanning work to be carried out better.

Road-safety data delivery in IP-based vehicular sensor networks

ABSTRACT With the substantial increase in vehicle population, the road safety problems such as accidents have become serious. In this paper, we propose a road-safety data delivery solution in vehicular sensor networks to solve road safety problems and improve driving safety. The road-safety data delivery in vehicular sensor networks is delay-sensitive, so this solution aims to reduce the road-safety data delivery latency by shortening the addressing, routing and handover delays. In the proposal, a new address structure is proposed to achieve the road-safety data delivery. Based on the new address structure, the address configuration can be achieved without duplicate address detection and the routing can be performed without route discovery. Moreover, multiple sensor devices can achieve handovers via one handover operation without performing time-consuming care-of address configuration. Finally, the proposal is analyzed and evaluated, and the data shows that the proposal effectively reduces the road-safety data delivery latency.

Using FDAD to Prevent DAD Attack in SEcure Neighbor Discovery Protocol

The It is very important for the corresponding author to have a linked ORCID (Open Researcher and Contributor ID) account on MTS. To register a linked ORCID account, please go to the Account Update page (http://mts.hindawi.com/update/) in our Manuscript Tracking System and after you have logged in click on the ORCID link at the top of the page. This link will take you to the ORCID website where you will be able to create an account for yourself. Once you have done so, your new ORCID will be saved in our Manuscript Tracking System automatically."?>SEND uses CGA as its address configuration method. CGA binds the IPv6 address with multiple auxiliary parameters, thereby making the dependency relationship between IPv6 address and host provable, which prevents address embezzlement. Owing to the considerable overhead in CGA parameter verification, the malicious host can use this point to carry out DoS attacks. To prevent DoS, the paper proposes a new duplicate address detection method in an SDN environment called FDAD. Two additional mechanisms are added to the FDAD, namely, query and feedback; messages used by the new mechanisms are also designed. Through these two mechanisms, on the one hand, the host can query the MAC address of the suspect host to the controller. On the other hand, if the CGA parameter verification fails, the controller will use feedback information to suppress malicious host from its source port in order to prevent subsequent attacks. Experiments show that the CPU overhead of FDAD is much lower than the normal CGA when suffering Denial of Service attack. The increased CPU consumption and memory overhead of the controller are also within acceptable range, and the network communication overhead is greatly reduced.

Cisco Packet Tracer Simulation as Effective Pedagogy in Computer Networking Course

The Computer Networking course commonly taught in mixed mode involving lecture and practical session whereas beside face-to-face theory session, students need to experience hands-on activities in order to appreciate the technology and contents. Nevertheless the abstraction in Computer Networking course such as the complexity in TCP/IP network layering, the connection and configuration of client and server’s framework, differences in static and dynamic IP address configuration had imposed a great challenge for students to understand and grab the main concept of computer networking technology. As such, an approach of using computer network simulation and visualization tool in teaching and learning Computer Networking course is seen beneficial for educators and students. In this research, computer network simulation software of CISCO Packet Tracer was utilized in Computer Networking (MTN3023) course. Students (N=55) were exposed to CISCO Packet Tracer on which they developed Wide Area Network (WAN) that consists of configuration activities of Personal Computer (PC), Servers and Switches according to CISCO standard. Subsequently, student’s feedback and their insight on the effectiveness of CISCO packet Tracer in learning computer networking were probed using questionnaire. All the feedbacks were investigating statistically using SPSS 16.0. From the analysis, the descriptive results shown that all students were agreed (N=32 : Strongly Agree; N=23 : Agree) that CISCO Packet Tracer had successfully help them to understand several key concepts of computer networking and at the same quash some abstractions they faced in the course. In a nutshell, CISCO Packet Tracer as a simulation and visualization tool had been proven to be an effective software in supporting the teaching and learning of computer networking course.

Sequence Configuration With Self-Organized Function Structure for Networking of Smart Sensors

The sustainable collection of sensing data is significant to the Internet of Things, smart factories, and big data technologies. Flexible connections among sensors are enabled by wireless multihop communication among sensors. Concerning the small size of sensing data, the length of addresses in each packet has a substantial impact on the amount of energy consumption at sensors. To sustain the wireless sensor networks (WSN) during periods of constrained energy supply, the smallest address size is desired to represent the IDs of sensors, in order to identify source, destination, and next-hop information in each packet of sensing data reports. On the other hand, the configuration of the smallest size addresses is significantly different from conventional address configuration procedures. The smallest address configuration requires both address uniqueness and the smallest use of address space, leading to the necessity of sequence configuration in distributed WSNs. This paper addresses the sequence configuration problem for efficiently configuring sensors with smallest size addresses. We first, to the best of our knowledge, explicitly examine the self-organized and optimized function structure for sequence configuration in sensor networks. We propose a scheme of dynamic function-structure based configuration that allows sensors to self-organize into function structures to efficiently configure minimum-size addresses and avoid address collisions. Quantitative analyses and computer simulation are conducted to verify the efficiency of the proposed approach.

Simulation and Design of University Area Network Scenario(UANS) using Cisco Packet Tracer

Computer network has become the most significant issue in our day to day life. Networking companies depend on the proper functioning and analysis of their networks for education, administration, communication, e-library, automation, etc. Mainly interfacing with the network is induced by one of the other user/users to share some data with them. So, this paper is about communication among users present at remote sites, sharing this same network UANS. UANS stands for the University Area Network Scenario. So in this work the network is designed using Cisco Packet Tracer. The paper describes how the tool can be used to develop a simulation model of the Pabna University of Science and Technology, Pabna, Bangladesh. The study provides into various concepts such as topology design, IP address configuration and how to send information in the form of packets in a single network and the use of virtual Local Area Network (VLANs) to separate the traffic generated by a different department.

A novel and efficient address configuration for MANET

SummaryAt present, one technical challenge of MANET is the address configuration, and another technical challenge is to deal with the network merging in order to ensure the address uniqueness in the merging network. This paper proposes a scheme to address these two issues. In the scheme, the MANET architecture is presented, and based on the architecture the address configuration algorithm is proposed. This algorithm employs an allocation variable to achieve the address configuration, and a node can ensure the address uniqueness without any interactions with other nodes. In order to effectively detect the network merging, this scheme proposes the generation algorithm of the MANET ID which uniquely identifies MANET. Based on this generation algorithm, the network merging algorithm is proposed. In this algorithm, only the nodes with the duplicate address perform the address reconfiguration, so the network merging cost and delay are reduced. This scheme is evaluated, and the results show that this scheme effectively improves the address configuration performance and the network merging performance.

Using multi‐address generation and duplicate address detection to prevent DoS in IPv6

The Neighbour Discovery Protocol and the Address Resolution Protocol are important protocols in the data link layer. Their functions include Internet Protocol (IP) address configuration, resolving the correspondence between an IP address and a medium access control address, and duplicate address detection (DAD). In DAD, the new address that the node is going to use is public, and thus, it is vulnerable to malicious node attacks. Moreover, address configuration is inefficient because only one address is generated and detected each time. In this study, the authors propose a multi-address generation and DAD scheme called MAGD. MAGD generates a set of addresses each time, but only discloses a part of the set during DAD, thereby reducing the risk of being attacked. DAD will only fail when all the addresses are in conflict, and thus, the efficiency of node's address configuration is enhanced. Experiments show that the additional overhead in the CPU and memory caused by MAGD's multiple address configuration is within an acceptable range. When subjected to denial-of-service (DoS) attacks, MAGD performs better than traditional encryption schemes.

Efficient Content Acquisition in WSN

In WSN, a mobile node needs to depend on intermediate mobile nodes to achieve content acquisition. Due to the mobility of nodes and the big size of multimedia content, it is significant to shorten content acquisition latency in WSN. This paper extends multihoming to WSN and aims to take advantage of multihoming to reduce content acquisition latency. In order to solve the multiple address configuration issue in multihoming, this paper proposes the address separation mechanism. Based on this mechanism, a mobile node can be configured with multiple addresses via one addressing process, so the addressing latency can be substantially reduced. In order to take advantage of multihoming to achieve content acquisition, this paper extends the k-anycast communication model to WSN so that a mobile node can use multiple addresses with different network prefixes to acquire different parts of one kind of content from multiple optimal k-anycast members in parallel. Consequently, the content acquisition latency can be reduced. This proposal is evaluated and the data results show that the content acquisition latency is shortened.

Addressing for 6LoWPAN

The paper proposes a distributed stateful IPv6 address configuration scheme for 6LoWPAN wireless sensor networks. In the scheme, each sensor node has a unique IPv6 address space for assignment and can allocate a unique IPv6 address for other nodes, so the distributed IPv6 address configuration is achieved and the address configuration for multiple sensor nodes is performed in parallel, which reduces the addressing cost and delay. Moreover, the paper proposes an IPv6 address recovery algorithm. If a node fails, the algorithm can automatically maintain and repair the topology of the k-way tree where the failed node locates in order to ensure that its descendants can work normally. Finally, this scheme is compared with existing scheme LISAA and the simulation results show that the addressing cost and delay are reduced by approximate 44% and 40%, respectively.