Detail výsledku
Host Identity Detection in IPv6 Networks
Holkovič Martin, Ing., Ph.D., UIFS (FIT)
Matoušek Petr, doc. Ing., Ph.D., M.A., UIFS (FIT)
It is important to keep networks secure and reliable. In order to backtrack security incidents, provide accounting for offered services etc., it is necessary to know the identity of network users. With various methods for IPv6 address assignments, IPv6 brings new challenges to user identification in LAN. This paper proposes a new approach for tracking user identity in LANs. The approach is based on network control traffic that is already present in IPv6 networks and it is passive to end devices. In contrast to current methods, the proposed approach does not bring any extensive workload to active network devices, works in networks with Multicast Listener Discovery snooping, and is able to detect that an address is no longer used. In order to make the approach reliable, we studied the behaviour of current operating systems during
IPv6 address assignments. We implemented a tool called ndtrack based on the proposed approach and tested it in real network.
Computer network security, host identity, IPv6 monitoring, SLAAC, neighbor discovery.
@inproceedings{BUT111509,
author="Libor {Polčák} and Martin {Holkovič} and Petr {Matoušek}",
title="Host Identity Detection in IPv6 Networks",
booktitle="E-Business and Telecommunications",
year="2014",
journal="Communications in Computer and Information Science",
volume="456",
number="456",
pages="74--89",
publisher="Springer Verlag",
address="Berlin",
doi="10.1007/978-3-662-44788-8",
isbn="978-3-662-44787-1",
issn="1865-0929",
url="http://link.springer.com/chapter/10.1007/978-3-662-44788-8_5"
}Pokročilé bezpečné, spolehlivé a adaptivní IT, VUT, Vnitřní projekty VUT, FIT-S-11-1, zahájení: 2011-01-01, ukončení: 2013-12-31, ukončen
Výzkum informačních technologií z hlediska bezpečnosti, MŠMT, Institucionální prostředky SR ČR (např. VZ, VC), MSM0021630528, zahájení: 2007-01-01, ukončení: 2013-12-31, řešení