IPv6 Network Environment Research Articles

Denial‐of‐Service Attack Detection over IPv6 Network Based on KNN Algorithm

With the rapid increase and complexity of IPv6 network traffic, the traditional intrusion detection system Snort detects DoS attacks based on specific rules, which reduces the detection performance of IDS. To solve the DoS intrusion detection problem in the IPv6 network environment, the lightweight KNN optimization algorithm in machine learning is adopted. First, the double dimensionality reduction of features is achieved through the information gain rate, and discrete features with more subfeatures are selected and aggregated to further dimensionality reduction and feature dimension of the actual operation. Secondly, the information gain rate is used as the weight to optimize the sample Euclidean distance measurement. Based on the proposed measure of the reverse distance influence, the classification decision algorithm of the KNN algorithm is optimized to make the detection technology better. The effect is further improved. The experimental results show that the traditional TAD‐KNN algorithm based on average distance and the GR‐KNN algorithm that only optimizes the distance definition, the GR‐AD‐KNN algorithm can not only improve the overall detection performance in the detection of IPv6 network traffic characteristics but also for small groups of samples. As a result, classification has better detection results.

Construction and Management of Astronomical Big Data Analysis and Multi-dimensional Information Visualization Platform

The development of modern astronomy is rapidly and astronomical data increases exponentially. The HPC architecture based on GPU provides an efficient way of astronomic big data computing. Based on secure Ipv6 network environment, PMO has constructed the Big Data Analysis and Multi-dimensional Information Visualization Platform, which can reach the peak computing speed of 352Tflops and the totally storage capacity of 288TB. The platform is composed of 25 computing nodes, one management node and 5 storage nodes. The use of user-friendly, centralized cluster management software, the deployment of proprietary environmental control settings and multi-dimensional visualization of safety management systems form a multi-level, tridimensional and efficient management structure. A high-speed, high-capacity, highly reliable, secure and efficient high-performance computing cluster is finally constructed. The platform has a fully redundant, self-healing, highly scalable distributed storage system, a high-performance InfiniBand parallel computing and storage network, a complete job scheduling system, a cuda parallel computing architecture, and a variety of physical software tools for astronomical applications. It offers a great help to astronomical research topics such as astronomical image processing, moving target extraction, space target orbit calculation, numerical cosmology, cosmology simulation, galaxy fluid simulation. Thus it provides an important information support for the research work of 3 major breakthroughs and 5 key cultivation directions in the "One Three Five" plan of Purple Mountain Observatory.

Handover Investigation and Neighbor Discovery Technique in Mobile IPV6

Recent improvements in wireless technologies allows mobile nodes to become reachable while moving around IPv6 network environment. Since mobility management mechanism is needed for the end users while roaming. In this paper we propose a Fast Handover Mobile IPv6 technique when the mobile node moves from one network to another network. After the successful completion of handover, the proposed system performs Duplicate Address Detection (DAD) for new mobile node. In this paper we propose Trust based Multipoint Relay-Neighbor Discovery Protocol (TMPR-NDP) for performing duplicate address detection. Finally, our simulation result shows that the proposed handover mechanism reduces latency, packet loss caused during handoff process and reduces the processing time caused during DAD.

A Framework of IPv6 Network Attack Dataset Construction by Using Testbed Environment

IPv6 has been implemented for quite a while. Nowadays, the number of IPv6 users has gradually increased. This is due to high demand of new IP addresses allocation which IPv4 cannot offer anymore. Theoretically, IPv6 protocol is much better than IPv4 in terms of security, mobility and routing speed. Although the design of the IPv6 technology has taken security concerns into its design, the implementation of IPv6 is not a panacea for the overall security issues. New threats have been discovered due to the flaws of the IPv6 new design. In IPv4, there is a dataset called KDD’ 99 dataset which widely used to propose a new detection technique in IPv4 environment. Many intrusion detection techniques were proposed by using the KDD’99 dataset. Unfortunately till this point of time there is no available dataset which similar to KDD’ 99 in IPv6 network environment. Hence, this paper is meant to propose a framework of constructing a dataset which similar to KDD’99 dataset based on IPv6 network environment. An example of IPv6 dataset construction is explained according to the proposed framework. A testbed based on the original KDD’ 99 framework is used as a baseline platform for this study. A framework of constructing IPv6 datasets is proposed which can be encouraged researchers to produce a solid dataset for IPv6 network environment. In the future, a new dataset can be produced which can facilitate further researcher in IPv6 security domain.