Implementation and Analysis of a Threat Model for IPv6 Host Autoconfiguration

Abstract

IPv6, the successor of IPv4, introduces the stateless autoconfiguration feature as a convenient alternative to the Dynamic Host Configuration Protocol (DHCP). However, the security implications of this new approach have only been discussed at the conceptual level. This thesis research develops software based on the open-source packet capture library Jpcap to capture and build appropriate ICMPv6 autoconfiguration messages. The developed Java software is used to implement two DoS threats to the IPv6 autoconfiguration procedure in a laboratory IPv6 network. The results indicate that these threats are real and further studies are required to identify suitable countermeasures. During this work compliance defects are also identified for the Linux Operating System's IPv6 implementation.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Sep 01, 2006
Accession Number
ADA456978

Entities

People

  • Savvas Chozos

Organizations

  • Naval Postgraduate School

Tags

Communities of Interest

  • Cyber
  • Materials and Manufacturing Processes

DTIC Thesaurus Topics

  • Computer Network Security
  • Computer Networks
  • Computer Science
  • Countermeasures
  • Data Links
  • Denial Of Service Attack
  • Detection
  • Information Operations
  • Internet
  • National Security
  • Network Protocols
  • Networks
  • Operating Systems
  • Security
  • Specifications
  • Standards
  • Test Beds

Fields of Study

  • Computer science

Readers

  • Computer Networking
  • Database Systems and Applications
  • Strategic Security Studies