Detection and Defense Mechanisms on Duplicate Address Detection Process in IPv6 Link-Local Network: A Survey on Limitations and Requirements

• Published in: Arabian journal for science and engineering (2011) Vol. 44; no. 4; pp. 3745 - 3763
• Main Authors: Al-Ani, Ahmed K., Anbar, Mohammed, Manickam, Selvakumar, Wey, Chong Yung, Leau, Yu-Beng, Al-Ani, Ayman
• Format: Journal Article
• Language: English
• Published: Berlin/Heidelberg Springer Berlin Heidelberg 01.04.2019; Springer Nature B.V
• Subjects: Defense mechanisms; Engineering; Humanities and Social Sciences; IP (Internet Protocol); multidisciplinary; New technology; Reproduction (copying); Research Article - Computer Engineering and Computer Science; Science; Security; Network security; Neighbor Discovery Protocol; IPv6 network; DoS attack; Duplicate Address Detection
• ISSN: 2193-567X; 1319-8025; 2191-4281
• DOI: 10.1007/s13369-018-3643-y

The deployment of Internet Protocol Version 6 (IPv6) has progressed at a rapid pace. IPv6 has introduced new features and capabilities that is not available in IPv4. However, new security risks and challenges emerge with any new technology. Similarly, Duplicate Address Detection (DAD), part of Neighbor Discovery Protocol in IPv6 protocol, is subject to security threats such as denial-of-service attacks. This paper presents a comprehensive review on detection and defense mechanisms for DAD on fixed network. The strengths and weaknesses of each mechanism to Secure-DAD process are discussed from the perspective of implementation and processing time. Finally, challenges and future directions are presented along with feature requirements for the new security mechanism to secure DAD procedure in an IPv6 link-local network.