IPv6 Environment Research Articles

Performance Investigation of IP Security Virtual Private Network in Ipv6 Environment using Quality of Service

Different types of data are transmitted through the internet, these data such as Email, HTTP, FTP and VoIP conversation might contain important and sensitive information which can be read or seen by other users. Many attacks such as man in the middle, packet sniffing and phishing are available and used by many attackers, as a way to access the protected information. Based on this fact, security and privacy become a necessity in the field of private network (intranet) and public network (extranet). IP sec VPN is considered to be the strongest technique for protecting packets from any kind of attack. In this paper, an analytical study is accomplished using opnet simulation software to design and analyze the proposed network. The proposed network represents four sites in different cities are communicating using the technique of IPsec VPN, different scenarios are created and studied to investigate the performance of network using IPsec VPN in IPV6 environment with QoS. The investigated metrics were packet end to end delay, jitter, packet delay variation, download and upload response time.

Quality optimization of OSPFV3 and EIGRP for IPV4 in hierarchical network environment using GNS3 tool

In network world, due to shortage of IP addresses in version 4, a new version of IP address, namely IPv6, has come into play, but due to non-exchange ability between IPv4 and IPv6, different routing protocol is come to play for IPv6 that is RIPng, OSPFv3 and EIGRP for IPv6 in the place of RIP, OSPFv2 and EIGRP in IPv4 environment. Transmission of data is based on the routing protocol which selects the best routes in network world. Two types of interior routing protocol which selects the best routes in network world that is distance vector and link state. In this research we compare two types of routing protocol are chosen as the simulation base that is OSPFv3 (Link state) and EIGRP IPv6 (Distance Vector) in terms of convergence and router CPU usage. These routing protocols are mostly used in network as well as internet. In this project, we are going to use GNS3 to simulate and compare OSPF and EIGRPv6 with authentication and without authentication in large hierarchical network using ipv4 and ipv6 environment. On top of everything, as a second step GNS3 simulator installed. Familiarity with GNS3 is essential to achieve this research study. As a second step, a certain hierarchical routing scheme scenarios will be created. Secondly, OSPFv3 and EIGRP IPv6 without authentication implemented and configured to get the required results in terms of CPU processing power and convergence time. Later, OSPFv3 and EIGRP IPv6 with authentication implemented and configured to get results for a comparison in terms of resources usage and convergence. As a final stage overall results of the research study compared to analyze the research parameters which are with and without authentication on both routing protocols. At the end of this research study, the result is drawn and presented in the thesis and a final comparative analysis presented in tabular format. In this Research study compare two parameters, CPU utilization and Processing power with and without authentication. We found that OSPFv3 uses less power as compared to EIGRP for IPv6 without authentication in hierarchal environment, but it takes more time to converge and with authentication it is also found that it ospfv3 uses less power as compared to EIGRP for IPv6 while EIGPR for IPv6 is faster than OSPFv3.

Retracted: Neural Network Optimal Routing Algorithm Based on Genetic Ant Colony in IPv6 Environment.

[This retracts the article DOI: 10.1155/2021/3115704.].

IPv6 Multicast Vulnerability – An Overview

IPv6 is the next Internet Protocol version designed to eventually replace IPv4 as the amount of potentially allocated IPv4 addresses is insufficient. The vulnerabilities of IPv6 protocols and the attacks against them demand more attention to be paid. The multicast mechanism is one of the crucial mechanisms that are related to the nature of IPv6 protocol. Despite its usefulness in performing basic tasks in IPv6 environments, the multicast mechanism is considered as a security hole that calls to be understood by the security specialists and IPv6 network administrators. To address the multicast security aspects, this paper presents the attacks that utilize the multicast vulnerability along with the identification of countermeasures for each attack. In particular, this paper analyzes the state-of-the-art attacks and ranks them based on a new severity ranking method to provide significant security guidance for deploying IPv6 networks.

Neural Network Optimal Routing Algorithm Based on Genetic Ant Colony in IPv6 Environment.

The traditional IPv6 routing algorithm has problems such as network congestion, excessive energy consumption of nodes, and shortening the life cycle of the network. In response to this phenomenon, we proposed a routing optimization algorithm based on genetic ant colony in IPv6 environment. The algorithm analyzes and studies the genetic algorithm and the ant colony algorithm systematically. We use neural network to build the initial model and combine the constraints of QoS routing. We effectively integrate the genetic algorithm and ant colony algorithm that maximize their respective advantages and apply them to the IPv6 network. At the same time, in order to avoid the accumulation of a lot of pheromones by the ant colony algorithm in the later stage of the network, we have introduced an anticongestion reward and punishment mechanism. By comparing the search path with the optimal path, rewards and punishments are based on whether the network path is smooth or not. Finally, it is judged whether the result meets the condition, and the optimal solution obtained is passed to the BP neural network for training; otherwise, iterative iterations are required until the optimal solution is satisfied. The experimental results show that the algorithm can effectively adapt to the IPv6 routing requirements and can effectively solve the user's needs for network service quality, network performance, and other aspects.

IMPLEMENTASI HONEYPOT PADA JARINGAN INTERNET LABOR FAKULTAS TEKNIK UNIKS MENGGUNAKAN DIONAEA SEBAGAI KEAMANAN JARINGAN

AbstractLack of knowladge of computer user about system security problem is one of the cause of computer problems. There are many computers that do not update their antivirus and some even do not use an antivirus. Network security techniques usually block attacks using a firewall or detect attack with IDS (Intruction Detection System), which is in charge of guarding against axisting attacks. However, by only using IDS the network administrator will be overwhelmed checking every notification given by IDS. This IDS works almost the same as an antivirus, unable to work in an encrypted environment or an IPv6 environment. For that, additional security is needed such as a dionaea honeypot. A honeypot is a fake system the signed to trap attacker, as if it were a real system. Based on these problems, a research will be conducted on the Analysis And Implementation Of Honeypot Using Dionaea as Network Security Support. Keywords: Honeypot, Dionaea, IDS, Firewall, Malware

Improving Intrusion Detection and Prevention System (IDPS) Performance in an IPv6 Environment

This paper presents a comprehensive investigation, backed up by detailed simulations, that the default settings of the software based open source Intrusion Detection and Prevention Systems (IDPs) are not enough to thwart the network attacks in a modern high-speed IPv6-only environment. It aims to solve this problem by improving the processing capabilities of an IDPS in more than one way, with each method being totally independent from the other. The proposed solution can be implemented by any user running an IDPS, without needing escalated privileges. Using and IPv6 packet generator, it is shown that with the increase in IPv6 traffic in a fixed amount of time, the IDPS fails to analyse all the packets and starts dropping them. This phenomenon compromises the core functionality of IDPS which is to stop the unwanted traffic. A hybrid solution has been proposed to increase the performance of the IDPS. Our research involves only the system running an IDPS, with little to no tweaking of the other elements within a network like routers, switches and firewalls. The paper also talks briefly about the current and the future generation of the IDPSs. The simulation with the hybrid solution concludes that the performance is improved to a staggering 200%, approximately, compared to the built-in settings of the IDPS.

Study and Optimized Simulation of OSPFv3 Routing Protocol in IPv6 Network

Routing is a design way to pass the data packet. User is assigns the path in a routing configuration. A significant role played by the router for providing the dynamic routing in the network. Structure and Configuration are different for each routing protocols. Next generation internet protocol IPv6 which provides large address space, simple header format. It is mainly effective and efficient routing. It is also ensure good quality of service and also provide security. Routing protocol (OSPFv3) in IPv6 network has been studied and implemented using ‘cisco packet tracer’. ‘Ping’ the ping command is used to check the results. The small virtual network created in Cisco platform .It is also used to test the OSPFv3 protocol in the IPv6 network. This paper also contains step by step configuration and explanation in assigning of IPv6 address in routers and end devices. The receiving and sending the packet of data in a network is the responsibility of the internet protocol layer. It also contains the data analysis of packet forwarding through IPv6 on OSPFv3 in simulation mode of cisco packet virtual environment to make the decision eventually secure and faster protocol in IPv6 environment.

Enhanced efficient SYN spoofing detection and mitigation scheme for DDoS attacks

Protection of critical server from cyber attacks is vital, especially in the case of active attacks like distributed denial of service (DDoS). Generally, denial of service (DoS) is an action that prevents or impairs the authorized use of networks, systems or applications by exhausting the resources, such as central processing units (CPU), memory, bandwidth and disk space. The job of the security professionals becomes complex, when the attacks are launched from trusted IP addresses, using synchronization (SYN) spoofing. The work presented in this paper is experimented with efficient spoofed mitigation scheme (ESMS) which uses the TCP probing method along with the bloom filter trust model. The experiment is carried out in both IPv4 and IPv6 environment in the smart and secure environment (SSE) real time test bed and the proposed scheme provides accurate and robust information for the detection and controlling of the spoofed packets during the DDoS attacks.

Enhanced efficient SYN spoofing detection and mitigation scheme for DDoS attacks

Protection of critical server from cyber attacks is vital, especially in the case of active attacks like distributed denial of service (DDoS). Generally, denial of service (DoS) is an action that prevents or impairs the authorized use of networks, systems or applications by exhausting the resources, such as central processing units (CPU), memory, bandwidth and disk space. The job of the security professionals becomes complex, when the attacks are launched from trusted IP addresses, using synchronization (SYN) spoofing. The work presented in this paper is experimented with efficient spoofed mitigation scheme (ESMS) which uses the TCP probing method along with the bloom filter trust model. The experiment is carried out in both IPv4 and IPv6 environment in the smart and secure environment (SSE) real time test bed and the proposed scheme provides accurate and robust information for the detection and controlling of the spoofed packets during the DDoS attacks.

Design of University Resource Website and Security Measures in IPV6

Abstract In this paper authors introduced the overall design of learning resource sharing platform in the pure IPv6 environment, including the client and the web server and the back-end database, and the user management, the detailed design of the three aspects of resource management platform and administrator management. Finally authors introduced application of decision tree in this website.

Topology-aware overlay network in mobile IP environment

An overlay network is a computer network which is built on the top of an underlying physical network. With the mobile internet access becoming the leading tool, overlay must be changing with different IP addresses, which may incur a large number of unnecessary update messages to overlay network. In recent years, mobile IP is being spread widely as one of fundamental protocols of mobile internet, which can guarantee overlay network unchangeable. However, the overlay efficiency may be affected negatively due to the mismatch between overlay and mobile IP network. In this paper, we present a topology-aware overlay network model. In the model, we proposed near-home principle applied in the joining procedure in mobile IPv4 environment and near-ROSP principle in mobile IPv6 environment. In our simulation, our proposed near-home principle and near-ROSP principle could do better to alleviate the mismatch between overlay and mobile IP network.

Intrusion Detection Systems of ICMPv6-based DDoS attacks

Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks are thorny and a grave problem of today’s Internet, resulting in economic damages for organizations and individuals. DoS and DDoS attacks that are using Internet Control Message Protocol version six (ICMPv6) messages are the most common attacks against the Internet Protocol version six (IPv6). They are common because of the necessary inclusion of the ICMPv6 protocol in any IPv6 network to work properly. Intrusion Detection Systems (IDSs) of the Internet Protocol version four (IPv4) can run in an IPv6 environment, but they are unable to solve its security problems such as ICMPv6-based DDoS attacks due to the new characteristics of IPv6, such as Neighbour Discovery Protocol and auto-configuration addresses. Therefore, a number of IDSs have been either exclusively proposed to detect IPv6 attacks or extended from existing IPv4 IDSs to support IPv6. This paper reviews and classifies the detection mechanisms of the existing IDSs which are either proposed or extended to tackle ICMPv6-based DDoS attacks. To the best of the authors’ knowledge, it is the first review paper that explains and clarifies the problems of ICMPv6-based DDoS attacks and that classifies and criticizes the existing detection.

Investigating the Performance of the MPT Multipath Communication Library in IPv4 and IPv6

The currently used mobile devices (laptops, tablets, mobile phones) contain many built-in network cards for communication (e.g. Wi-Fi, 3G, Bluetooth, etc.). A natural request could be combining the resources of the different network connection possibilities in order to increase the throughput of the communication. Unfortunately the standard IP communication technology does not support it: the communication is restricted to one IP address (i.e. to one interface). The Multipath TCP (MPTCP) specification (appeared in January 2013) offers a Transport layer solution of using more than one interface in a TCP communication session. In this paper we investigate a Network layer solution. The MPT multipath communication library opens the multipath communication possibility in the Network layer. Using the MPT library, applications built on the UDP protocol are also able to perform multipath communication. The MPT library was developed by using a full dual-stack technology, which means the MPT based multipath environment can be used both in IPv4 and IPv6. Protocol version change is also possible: an IPv6 based application is able to run in an IPv4 multipath environment, and an IPv4 application can be used in an IPv6 multipath environment. In this paper we give a short overview on the MPT communication library’s working mechanism and detailed numerical examples will be shown to present how the MPT library aggregates the paths’ throughput in IPv4 and IPv6 environments. The main contribution of the paper is to demonstrate the effective throughput aggregation property of the MPT library in IPv6 and in mixed (i.e. protocol version change) environments.

Performance Analysis of DSDV, I-DSDV, OLSR , ZRP Proactive Routing Protocol in Mobile AdHoc Networks in IPv6

Ad hoc network is a collection of wireless mobile nodes where wireless radio interface connects each device in MANET to move freely, independently and randomly. Routing protocols in mobile ad hoc network helps to communicate source node with destination node by sending and receiving packets. The communication between these mobile nodes is carried out without any centralized control. Thus it is necessary to analyze the behavior of different routing protocols under different environments. Many studies have been done on the performance evaluation of routing protocols of MANET, but most of these studies are based on IPv4. On the other hand Ipv6 is gaining popularity because it has some additional feature over Ipv4 as it supports multicasting, multi-homing, efficient routing. Ipv6 is more secure as compared to IPv4 and has large address space to support. In this paper performance of four proactive ad hoc routing protocols Optimized Link State Routing Protocol (OLSR) Destination-Sequenced Distance Vector (DSDV) Improvement Destination-Sequenced Distance Vector (I-DSDV) Zone routing protocol (ZRP) evaluated under Ipv6 environment on the basis of end to end delay, packet delivery fraction, routing overhead. The objective of this paper is to investigate how these routing protocols behave under IPv6 environment and identify which routing protocol perform better. Ns-2 is used as simulation tool.

Empirical Study of Achievable Bandwidth Capacity of VoIP Infrastructure in an Intranet with Open Source Tools

This paper presents an empirical study of achievable bandwidth/concurrent calls capacity of an open source Voice over Internet Protocol (VoIP) Server deployed on an Intranet with open source tools. Network readiness in IPv4 and IPv6 environments was evaluated using Iperf while VoIP calls were simulated with open source SIPp (Session Initiation Protocol performance-tester). Voipmonitor, another open source software, was used to measure the bandwidth capacity and maximum concurrent calls handling capacity of the Asterisk Server over fast Ethernet Local Area Network. It can be deduced that the concurrent calls capacity of a VoIP server is dependent on a number of factors such as the VoIP readiness / bandwidth of the network and hardware specifications of the VoIP server. The result from experimental values shows that the achievable bandwidth otherwise called TCP throughput (for the 100Mbps LAN) for IPv4 and IPv6 traffics in dual stack configuration is 86.8Mbps and 87.4Mbps respectively. While that of UDP bandwidth measurement gives 50Mbps, jitter value of 1.794ms and packet loss of 0.59% for IPv4 traffic and 49.7Mbps bandwidth, 0.592ms jitter with packet loss of 0.22% for IPv6 traffic. At the maximum concurrent calls handling capacity, the processor of the VoIP server was observed to have 100% loading or utilization measure. It is recommended that the VoIP server should not be loaded continuously at this maximum processor load for optimum performance and longevity of life.

Comparison between resource reservation protocol and next steps in signalling in mobile IP networks

Providing an acceptable level of quality of service (QoS) for critical applications is one of the interesting topics in next generation wireless networks. Confronting the major criticisms of resource reservation protocol (RSVP), the next steps in signalling (NSIS) was introduced as a general framework to include not only the resource reservation protocol but other signalling services in IP based networks. It attempts to address the RSVP shortcomings and to offer additional features. It is widely believed that NSIS can be considered as a suitable alternative for RSVP. However, it worsens the scalability issue in the RSVP operation, inherits the RSVP problem in mobile environments and its appealing features come with a significant cost. This paper develops an analytical framework to evaluate the RSVP and NSIS performances in proxy mobile IPv6 (PMIPv6) environment. The results obtained showed a significant increase in network signalling cost, more bandwidth consumption by resource reservation signalling messages and a high resource re-establishment latency in NSIS operations. We believe these outcomes raise doubts over the NSIS eligibility as a suitable replacement for RSVP.

Traffic Security for Abnormal Network in IPv6 Environment

Traffic Security for Abnormal Network in IPv6 Environment

A Framework of IPv6 Network Attack Dataset Construction by Using Testbed Environment

IPv6 has been implemented for quite a while. Nowadays, the number of IPv6 users has gradually increased. This is due to high demand of new IP addresses allocation which IPv4 cannot offer anymore. Theoretically, IPv6 protocol is much better than IPv4 in terms of security, mobility and routing speed. Although the design of the IPv6 technology has taken security concerns into its design, the implementation of IPv6 is not a panacea for the overall security issues. New threats have been discovered due to the flaws of the IPv6 new design. In IPv4, there is a dataset called KDD’ 99 dataset which widely used to propose a new detection technique in IPv4 environment. Many intrusion detection techniques were proposed by using the KDD’99 dataset. Unfortunately till this point of time there is no available dataset which similar to KDD’ 99 in IPv6 network environment. Hence, this paper is meant to propose a framework of constructing a dataset which similar to KDD’99 dataset based on IPv6 network environment. An example of IPv6 dataset construction is explained according to the proposed framework. A testbed based on the original KDD’ 99 framework is used as a baseline platform for this study. A framework of constructing IPv6 datasets is proposed which can be encouraged researchers to produce a solid dataset for IPv6 network environment. In the future, a new dataset can be produced which can facilitate further researcher in IPv6 security domain.

Research and Realization of the IPv6 Network Attack Platform

The proposed IPv6 protocol has brought new problems for network security. The new protocol and features were introduced for IPv6 and the new type of attack applicable in the environment of IPv6 was summarized. And then, according to the idea of the attack detection, computers themselves can discover the vulnerabilities and deficiencies of their own systems. Thus the vulnerabilities will be patched up and the security of the system will be improved. We focused our research on designing and realizing the IPv6 network attack platform by designing the overall structure of the platform. Finally, we tested the IPv6 network attack platform. Test results show that the attack effect is remarkable, which plays a role in finding computers’ system vulnerabilities, strengthening security protection and enhancing network security.