Flow-Based Detection of IPv6-specific Network Layer Attacks
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F63839172%3A_____%2F17%3A10132893" target="_blank" >RIV/63839172:_____/17:10132893 - isvavai.cz</a>
Result on the web
<a href="http://dx.doi.org/10.1007/978-3-319-60774-0_11" target="_blank" >http://dx.doi.org/10.1007/978-3-319-60774-0_11</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1007/978-3-319-60774-0_11" target="_blank" >10.1007/978-3-319-60774-0_11</a>
Alternative languages
Result language
angličtina
Original language name
Flow-Based Detection of IPv6-specific Network Layer Attacks
Original language description
With a vastly different header format, IPv6 introduces new vulnerabilities not possible in IPv4, potentially requiring new detection algorithms. While many attacks specific to IPv6 have proven to be possible and are described in the literature, no detection solutions for these attacks have been proposed. In this study we identify and characterise IPv6-specific attacks that can be detected using flow monitoring. By constructing flow-based signatures, detection can be performed using available technologies such as NetFlow and IPFIX. To validate our approach, we implemented these signatures in a prototype, monitoring two production networks and injecting attacks into the production traffic.
Czech name
—
Czech description
—
Classification
Type
D - Article in proceedings
CEP classification
—
OECD FORD branch
10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)
Result continuities
Project
<a href="/en/project/EF16_013%2F0001797" target="_blank" >EF16_013/0001797: CESNET E-Infrastructure - Modernisation</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)
Others
Publication year
2017
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Article name in the collection
Security of Networks and Services in an All-Connected World: 11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2017, Zurich, Switzerland, July 10-13, 2017, Proceedings
ISBN
978-3-319-60773-3
ISSN
0302-9743
e-ISSN
neuvedeno
Number of pages
6
Pages from-to
137-142
Publisher name
Springer International Publishing
Place of publication
Zurich, Switzerland
Event location
Zurich, Switzerland
Event date
Jul 10, 2017
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
—