Informatics Publishing Limited

Shafiq Ul Rehman ¹, Selvakumar Manickam ¹

Affiliations
1 National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia (USM), Penang, MY

Abstract

IPv6 deployment is currently under way at a rapid pace. IPv6 introduced new features and capabilities lacking in IPv4 but as with any new technology, there are always security risks and challenges that need to be addressed. Duplicate Address Detection (DAD) is part of IPv6’s Network Discovery Protocol that is vulnerable to security threats such as: Spoofing, Denial of Service (DoS). This survey paper, aims to present various techniques that were introduced to mitigate such security threats and highlight the limitations of techniques. Herein, we will discuss a) the concepts of Neighbor Discovery Protocol in IPv6 b) Duplicate Address Detection process c) security issues in Duplicate Address Detection d) proposed mitigation techniques and their limitations to encounter security threats and finally, conclusion and future work.

Keywords

DoS, Duplicate Address Detection, IPv6, Neighbor Discovery Protocol, Security, Source Address Validation

Full Text