IPv6 Address Cookies
Mitigating Spoofed Attacks in the Next Generation Internet
by Timothy D. Morgan
Abstract
It has long been known to researchers that address spoofing on the Internet is a serious problem. While a great deal of effort has been put into finding theoretical and practical solutions, spoofed attacks are still globally endemic. They represent a simple nuisance to many, but a business-halting bane to others. Enter IPv6. IPv6 is the next generation of the Internet protocol designed to alleviate the existing global address shortage and improve the scalability and extensibility of the aging IPv4 protocol. This new protocol provides an enormous 128-bit address space, which should provide enough addresses for several decades, if not centuries, of Internet expansion. In this paper, we propose methods which utilize the large IPv6 address space to mitigate spoofed attacks.
Full Paper
Mirror 1 (fast download) as PDF(437 kilobytes)
This site (slow download) as gzipped PDF(378 kilobytes)
Miscellaneous
Completed in partial fulfillment of the requirements for the degree of Master of Science in the field of Computer Science at Northeastern University.
Thesis committee members: Dr. Guevara Noubir (advisor), Dr. Javed Aslam, and Dr. Riccardo Pucella.
|