IPv6 기반 NGN 환경에서 무결성을 제공하는 역추적 기법
An IP Traceback “M”echanism with “E”nhanced “I”ntegrity for IPv6-based NGN Environment
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
It is difficult to identify attacker's real location when the attacker spoofs IP address in current IPv4-based Internet environment. If the attacks such as DDoS happen in the Internet, we can hardly expect the protection scheme to respond to these attacks in active or real-time manner. Many traceback techniques have been proposed to protect against these attacks, but most traceback schemes were designed to work with the IPv4-based Internet and found to be lack of verification of whether the traceback related information is forged or not. Few traceback schemes for IPv6-based network environment have been suggested, but it has these disadvantages that needs more study. In this paper, we propose the reliable IP traceback scheme supporting integrity of traceback-related information in IPv6 network environment, simulate it, and compare our proposed scheme with exsisting traceback mechanisms in terms of overhead and functionality.
Abstract
It is difficult to identify attacker's real location when the attacker spoofs IP address in current IPv4-based Internet environment. If the attacks such as DDoS happen in the Internet, we can hardly expect the protection scheme to respond to these attacks in active or real-time manner. Many traceback techniques have been proposed to protect against these attacks, but most traceback schemes were designed to work with the IPv4-based Internet and found to be lack of verification of whether the traceback related information is forged or not. Few traceback schemes for IPv6-based network environment have been suggested, but it has these disadvantages that needs more study. In this paper, we propose the reliable IP traceback scheme supporting integrity of traceback-related information in IPv6 network environment, simulate it, and compare our proposed scheme with exsisting traceback mechanisms in terms of overhead and functionality.
참고문헌 (15)
- X.Zeltsan, "Guidelines for NGN Security Release", ITU-T,FGNGN,FGNGN-OD-00254, ~ (2005)
- 한정화, "역추적 기술 및 보안 요구사항 분석", 한국정보보호학회지, 18(5), pp.132~141 (2008)
- S.Savage, "Practical Network Support for IP Traceback", Proceedings of ACM SIGCOMM 2000, pp.295~306 (2000)
- H.C.J. Lee, "On the Issues of IP Traceback for IPv6 and Mobile IPv6", Proceedings of the IEEE International Symposium on Computers and Communication, pp.582~587 (2003)
- E.Albright, "An Implementation of IP Traceback in IPv6 Using Probabilistic Packet Marking", Proceedings of International Conferencee on Internet Computing(ICOMP 05) (2005)
- 허준, "IPv6 네트워크 환경에서의 경량화된 IP 역추적 기법", 정보보호학회논문지, 17(2), pp.93~102 (2007), 한국정보보호학회
- Rack-Hyun Kim, "An Efficient IP Traceback mechanism for the NGN based on IPv6 Protocol", JWIS 2009 (2009)
- S.O.Amin, "On IPv6 traceback", ICACT 2006 (2006)
- S.K.Rayanchu, "Tracing Attackers with Deterministic Edge Router Marking(DERM)", Distributed Computing and Internet Technology,First International Conference, pp.400~409 (2004)
- Shokri,Reza, "DDPM:Dynamic Deterministic Packet Marking for IP Traceback", IEEE International Conference on Networks, pp.1~6 (2006)
- Hazeyama,Hiroaki, "An Autonomous Architecture for Inter-Domain Traceback across the Borders of Network Operation", Proceedings of the 11th IEEE Symposium on Computers and Communications, pp.378~385 (2006)
- A.C.Snoeren, "Single-Packet IP Traceback", IEEE, 2002, 721~734
- W.T.Strayer, "SPIE-IPv6:Single IPv6 Packet Traceback", Proceedings of the 29th Annual IEEE International Conference on Local Computer Networks, pp.118~125 (2004)
- Steve Bellovin, "ICMP Traceback Messages", IETF Internet Draft, Version 4, ~ (2003)
- S.Deering, "Internet Protocol, Version 6 (IPv6) Specification", RFC2460, ~ (1998)