论文信息 - Source address validation based Ethernet switches for IPv6 network

Source address validation based Ethernet switches for IPv6 network

Traditional Internet architecture doesn't check the source address when forwarding the packet, and that led to various source address spoofing forgery attacks. This paper proposes a novel scheme of source address validation based Ethernet switches for IPv6 Network. This system validate the source address in the various network address allocation mode, including manual address configuration, stateless address auto configuration, Dynamic Host Configuration Protocol and their mix address configuration mode. The demonstration implementation of the system is presented in this paper.

Hu Jinlong | Wu Yisheng

[1] Thomas Narten,et al. Neighbor Discovery for IP Version 6 (IPv6) , 1996, RFC.

[2] Thomas Narten,et al. IPv6 Stateless Address Autoconfiguration , 1996, RFC.

[3] Gang Ren,et al. Source Address Validation: Architecture and Protocol Design , 2007, 2007 IEEE International Conference on Network Protocols.

[4] Paul Ferguson,et al. Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing , 1998, RFC.

[5] Pekka Nikander,et al. SEcure Neighbor Discovery (SEND) , 2005, RFC.

[6] Hugo Krawczyk,et al. A Security Architecture for the Internet Protocol , 1999, IBM Syst. J..

[7] Gang Ren,et al. A Source Address Validation Architecture (SAVA) Testbed and Deployment Experience , 2008, RFC.

[8] Ralph E. Droms,et al. Dynamic Host Configuration Protocol for IPv6 (DHCPv6) , 2003, RFC.

[9] Randall J. Atkinson,et al. Security Architecture for the Internet Protocol , 1995, RFC.

[10] Fred Baker,et al. SAVI Threat Scope , 2008 .