Result Details
A New Approach for Detection of Host Identity in IPv6 Networks
Holkovič Martin, Ing., Ph.D., DIFS (FIT)
Matoušek Petr, doc. Ing., Ph.D., M.A., DIFS (FIT)
For security, management and accounting, network administrators benefit from knowledge of IP and MAC address bindings. In IPv6, learning these bindings is not as straightforward as it is in IPv4. This paper presents a new approach to track IPv6 address assignments in LANs. The method is based on a study of implementation of IPv6 (mainly neighbor discovery) in current operating systems. The detection is passive for end devices and does not require any software or hardware modifications. In contrast with current methods, our approach does not poll routers in the network and works also in networks where IPv6 multicast is not broadcasted (active MLD snooping). Moreover, our approach detects that an address is no longer used. The approach was successfully tested in a campus network.
Computer network security, host identity, IPv6 monitoring, SLAAC, neighbor discovery.
@inproceedings{BUT103512,
author="Libor {Polčák} and Martin {Holkovič} and Petr {Matoušek}",
title="A New Approach for Detection of Host Identity in IPv6 Networks",
booktitle="Proceedings of the 4th International Conference on Data Communication Networking, 10th International Conference on e-Business and 4th International Conference on Optical Communication Systems",
year="2013",
pages="57--63",
publisher="SciTePress - Science and Technology Publications",
address="Reykjavík",
doi="10.5220/0004608700570063",
isbn="978-989-8565-72-3",
url="https://www.fit.vut.cz/research/publication/10362/"
}Modern Tools for Detection and Mitigation of Cyber Criminality on the New Generation Internet, MV, Program bezpečnostního výzkumu České republiky 2010 - 2015, VG20102015022, start: 2010-10-01, end: 2015-09-30, completed
Security-Oriented Research in Information Technology, MŠMT, Institucionální prostředky SR ČR (např. VZ, VC), MSM0021630528, start: 2007-01-01, end: 2013-12-31, running