Dynamic IPv6 activation based defense for IPv6 router advertisement flooding (DoS) attack

Abstract

IPv6 router advertisement flooding is one of the severe DoS attack. It leads to denial of service attack on entire Local Area Network. As a result all system connected to that LAN get frozen and unresponsive. Whole LAN and its systems stop working. Hence it is very important to protect our LANs from IPv6 RA flood attack. In this paper, we described IPv6 RA flood attack in virtual LAN using KALI Linux. We showed its effects on the victim's computer. We proposed a new approach to defend from Ipv6 RA flooding DoS attack by dynamic ipv6 activation. Such a system would detect the attack and raise a warning alarm. It deactivates IPv6 temporarily. When host recovers from the attack, the proposed system reactivates IPv6 again. So by using this approach user can use both IPv6 and IPv4 services even under attack. We have also provided pseudo code and experimental results in this paper.