並列摘要
To secure the operations of address auto-configuration protocols in IPv6 networks, a solution called Secure Address Configuration for IPv6 (SAC6) is proposed in this paper. Unlike the previous solutions that mainly use the cryptographic approach, SAC6 eliminates the threats to configuration protocols for the network nodes by acting like a Neighbor Discovery Protocol agent. The major merit of SAC6 is that its operations are transparent to the network and do not require the modification of existing protocols. Therefore, it can be seamlessly deployed in existing IPv6 networks. To demonstrate the viability of SAC6, we implemented SAC6 as a kernel module in a Linux bridge. In our experiments, SAC6 have successfully blocked various kinds of spoofing configuration protocol messages and prevent the network nodes from being attacked during the address configuration.
延伸閱讀
- Lin, Y. N., Lin, Y. D., Lai, Y. C., & Lin, C. H. (2010). VPN Gateways over Network Processors: Implementation and Evaluation. 網際網路技術學刊, 11(4), 457-463. https://doi.org/10.6138/JIT.2010.11.4.03
- 薛來銘、張阜民、林建霖、高勝助（2009）。A Defensive System against Neighbor Discovery Attacks in IPv6 Wireless Networks。科學與工程技術期刊，5(3)，77-85。https://www.airitilibrary.com/Article/Detail?DocID=18166563-200909-5-3-77-85-a
- Li, J., Zhang, P., & Sampalli, S. (2008). Improved Security Mechanism for Mobile IPv6. International Journal of Network Security, 6(3), 291-300. https://doi.org/10.6633/IJNS.200805.6(3).08
- Alexiou, N., Tsiouris, G., & Sykas, E. (2004). Providing Internet Access and Efficient Mobility Support to IPv6 Personal Area Networks. 網際網路技術學刊, 5(2), 87-93. https://www.airitilibrary.com/Article/Detail?DocID=16079264-200404-5-2-87-93-a
- Tseng, Y. C., Jiang, J. R., & Lee, J. H. (2004). Secure Bootstrapping and Routing in an IPv6- Based Ad Hoc Network. 網際網路技術學刊, 5(2), 123-130. https://doi.org/10.6138/JIT.2004.5.2.07