{"title":"IPv6 寻址方案,通过减少侦查攻击提高性能","authors":"Pragya, Bijendra Kumar","doi":"10.1002/itl2.493","DOIUrl":null,"url":null,"abstract":"In resource‐constrained networks, IPv6 addresses are assigned to devices using SLAAC‐based EUI‐64, which generates unique addresses. However, the constant interface identifier (IID) across networks makes it vulnerable to reconnaissance attacks like location tracking, network activity correlation, address scanning, etc. This research work introduces a new addressing strategy that utilizes the Elegant Pairing function to guarantee the generation of nonpredictable unique IPv6 addresses, thereby mitigating different types of reconnaissance attacks. The proposed scheme achieves 100% address success rate (ASR) based on experimental evaluation while effectively thwarting reconnaissance attacks. Importantly, it achieves security enhancements without additional communication overhead and energy consumption.","PeriodicalId":509592,"journal":{"name":"Internet Technology Letters","volume":"60 2","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2023-11-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"IPv6 addressing scheme to enhance the performance by mitigating reconnaissance attack\",\"authors\":\"Pragya, Bijendra Kumar\",\"doi\":\"10.1002/itl2.493\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"In resource‐constrained networks, IPv6 addresses are assigned to devices using SLAAC‐based EUI‐64, which generates unique addresses. However, the constant interface identifier (IID) across networks makes it vulnerable to reconnaissance attacks like location tracking, network activity correlation, address scanning, etc. This research work introduces a new addressing strategy that utilizes the Elegant Pairing function to guarantee the generation of nonpredictable unique IPv6 addresses, thereby mitigating different types of reconnaissance attacks. The proposed scheme achieves 100% address success rate (ASR) based on experimental evaluation while effectively thwarting reconnaissance attacks. Importantly, it achieves security enhancements without additional communication overhead and energy consumption.\",\"PeriodicalId\":509592,\"journal\":{\"name\":\"Internet Technology Letters\",\"volume\":\"60 2\",\"pages\":\"\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2023-11-20\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Internet Technology Letters\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1002/itl2.493\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Internet Technology Letters","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1002/itl2.493","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
IPv6 addressing scheme to enhance the performance by mitigating reconnaissance attack
In resource‐constrained networks, IPv6 addresses are assigned to devices using SLAAC‐based EUI‐64, which generates unique addresses. However, the constant interface identifier (IID) across networks makes it vulnerable to reconnaissance attacks like location tracking, network activity correlation, address scanning, etc. This research work introduces a new addressing strategy that utilizes the Elegant Pairing function to guarantee the generation of nonpredictable unique IPv6 addresses, thereby mitigating different types of reconnaissance attacks. The proposed scheme achieves 100% address success rate (ASR) based on experimental evaluation while effectively thwarting reconnaissance attacks. Importantly, it achieves security enhancements without additional communication overhead and energy consumption.