Detail publikace

A New Approach for Detection of Host Identity in IPv6 Networks

Originální název

A New Approach for Detection of Host Identity in IPv6 Networks

Anglický název

A New Approach for Detection of Host Identity in IPv6 Networks

Jazyk

en

Originální abstrakt

For security, management and accounting, network administrators benefit from knowledge of IP and MAC address bindings. In IPv6, learning these bindings is not as straightforward as it is in IPv4. This paper presents a new approach to track IPv6 address assignments in LANs. The method is based on a study of implementation of IPv6 (mainly neighbor discovery) in current operating systems. The detection is passive for end devices and does not require any software or hardware modifications. In contrast with current methods, our approach does not poll routers in the network and works also in networks where IPv6 multicast is not broadcasted (active MLD snooping). Moreover, our approach detects that an address is no longer used. The approach was successfully tested in a campus network.

Anglický abstrakt

For security, management and accounting, network administrators benefit from knowledge of IP and MAC address bindings. In IPv6, learning these bindings is not as straightforward as it is in IPv4. This paper presents a new approach to track IPv6 address assignments in LANs. The method is based on a study of implementation of IPv6 (mainly neighbor discovery) in current operating systems. The detection is passive for end devices and does not require any software or hardware modifications. In contrast with current methods, our approach does not poll routers in the network and works also in networks where IPv6 multicast is not broadcasted (active MLD snooping). Moreover, our approach detects that an address is no longer used. The approach was successfully tested in a campus network.

BibTex


@inproceedings{BUT103512,
  author="Libor {Polčák} and Martin {Holkovič} and Petr {Matoušek}",
  title="A New Approach for Detection of Host Identity in IPv6 Networks",
  annote="For security, management and accounting, network administrators benefit from
knowledge of IP and MAC address bindings. In IPv6, learning these bindings is not
as straightforward as it is in IPv4. This paper presents a new approach to track
IPv6 address assignments in LANs. The method is based on a study of
implementation of IPv6 (mainly neighbor discovery) in current operating systems.
The detection is passive for end devices and does not require any software or
hardware modifications. In contrast with current methods, our approach does not
poll routers in the network and works also in networks where IPv6 multicast is
not broadcasted (active MLD snooping). Moreover, our approach detects that an
address is no longer used. The approach was successfully tested in a campus
network.",
  address="SciTePress - Science and Technology Publications",
  booktitle="Proceedings of the 4th International Conference on Data Communication Networking, 10th International Conference on e-Business and 4th International Conference on Optical Communication Systems",
  chapter="103512",
  doi="10.5220/0004608700570063",
  edition="NEUVEDEN",
  howpublished="print",
  institution="SciTePress - Science and Technology Publications",
  year="2013",
  month="july",
  pages="57--63",
  publisher="SciTePress - Science and Technology Publications",
  type="conference paper"
}