China
Africa
Explore chapters and articles related to this topic
Routing and Addressing
Published in Rui Valadas, OSPF and IS-IS, 2019
Taking ARP as an example, when a device needs to determine the MAC address associated with an IPv4 address of its subnet, it questions all interfaces attached to the subnet through an ARP REQUEST message transmitted to the MAC broadcast address; the recipient that owns the IPv4 address provides the requested information through an ARP REPLY message (see Section 3.2.6 of [42]). NDP uses the same process, where the equivalent of the ARP REQUEST is the NEIGHBOR SOLICITATION message, and the equivalent of the ARP REPLY is the NEIGHBOR ADVERTISEMENT message (see Chapter 5 of [14]). To avoid exchanging these messages whenever a new packet needs to be transmitted on a layer-2 network, the devices (hosts or routers) that discover an association between IP and MAC addresses cache it in memory for some time.
CRPRO: the design and implementation of a test case reducer
Published in Amir Hussain, Mirjana Ivanovic, Electronics, Communications and Networks IV, 2015
Fengchang Lv, Xiaodong Li, Yuxu Ye, Jinfei Hei
In IPv6, neighbor discovery protocol (NDP) is used to replace address resolution protocol (ARP) (Arkko & Pignataro 2009) used in IPv4, to map IP address to MAC address. Similarly, NDP is also vulnerable to different kinds of attacks existing in ARP (Re & Lv 2003), for instance IP address spoofing attack and flood attacks against gateway etc. In addition, there are special types of attack against NDP, for example duplicate address detection attack (DAD attack) and router advertisement attack (RA attack). In the following of this section, we will describe how to test whether a SAVI switch can prevent these attacks by taking the examples of DAD attack and IP address spoofing attack.
Introduction, Security Challenges, and Threats in IoT
Published in S. Velliangiri, Sathish A. P. Kumar, P. Karthikeyan, Internet of Things, 2020
Sudhakar Hallur, Roopa Kulkarni, Prashant Patavardhan
Finding the close by working gadgets in a similar system of IoT condition utilizes Neighbor Discovery Protocol (NDP) in IPv6, which thusly finds the MAC locations of accessible routers, detects address duplication, and maintains the address resolution. Inappropriate authentication mechanism during the nearest node discovery may lead to a DDoS attack.[38]
IPv6 Addressing Scheme with a Secured Duplicate Address Detection
Published in IETE Journal of Research, 2022
In the Internet it is a prerequisite that each device must have a globally unique IP such as IPv4 or IPv6 address to communicate. IPv4 address is exhausted before the beginning of IoT hence IPv6 is mainly used. One of the main barriers identified by CISCO system [1] is the deployment of IPv6 address in IoT; hence need to address the IPv6 allocation issues [2], privacy and security consideration [3] of the address generation mechanism. The IPv6 address generation in resource constrained IoT network such as 6LoWPAN and Zigbee is mainly achieved by employing stateless auto address configuration (SLAAC) [4,5] mechanism. SLAAC is designed to provide the simplest, scalable, and dynamic way by which nodes can themselves configure IPv6 address. In SLAAC mechanism IPv6 address is formed by combining 64 bits global routing prefix (GRP) and 64 bits interface identifiers (IID). The GRP of all the nodes in a network is the same and is delivered by the network’s Edge Router or Access Router (AR). Second part IID is generated by the node itself using any addressing scheme. In SLAAC IPv6 uniqueness of nodes is maintained by DAD protocol. DAD protocol uses neighbour discovery protocol (NDP) to detect address duplication. In the NDP duplicate address detection is performed using neighbour advertisement (NA) and neighbour solicitation (NS) message [6].