7 research outputs found
Towards a New Algorithm to Optimize IPv6 Neighbor Discovery Security for Small Objects Networks
In order to verify the uniqueness of link-local or unicast addresses, nodes must perform a Duplicate Address Detection process before using them. However, this process is subject to many attacks and the security is willing to be the most important issues in Small Object Networks with IPv6. In this paper, we developed a new algorithm to optimize the security in IPv6-DAD process; this method is based on SHA-512 to verify the identity of the Neighbor Discovery messages transmitted in the link local. First, before sending the NS message, the new node uses the function SHA-512 to hash to the target address and use the last 64 bits in a new field and then encrypt the result with its private key. When receiving the secure message, the existing nodes decrypt it. Our algorithm is going to secure the DAD process by using a digital signature. Overall, this algorithm showed a significant effect in terms of the Address Configuration Success Probability (ACSP).</jats:p
Minimising the impact of IPv6 neighbour discovery messages on energy consumption in small objects networks
NAT64 vs SIIT: performance and scalability study for VoIP services
The growing demand for IP addresses, driven by the proliferation of devices, has depleted the internet protocol (IP) version 6 (IPv6) reserves of some regional internet registries (RIRs). It is imperative to migrate to IPv6, offering an extended addressing space. This transition is no longer a choice but a necessity due to the exhaustion of IP version 4 (IPv4) addresses. The internet engineering task force (IETF) has implemented various transition strategies, such as the use of dual stack, IPv6-in-IPv4 tunnels, and address translation, due to the inconsistency between the two versions of the IP (IPv4 and IPv6). IPv4/IPv6 address translation mechanisms are crucial for the coexistence of networks using both protocols, with scalability playing a central role. Although these mechanisms offer advantages such as optimizing addressing space, their ability to scale effectively must be evaluated, especially in demanding scenarios such as voice over IP (VoIP). This article examines the scalability of two mechanisms, network address translation 64 (NAT64) and stateless IP/internet control message protocol (ICMP) translation (SIIT), in terms of VoIP clients in the graphical network simulator 3 (GNS3) environment. The results indicate that the SIIT mechanism is more performant and scalable than NAT64 in all measured parameters
