Security and Privacy produced by nHCP Unique Identifiers

Simple item page
dc.contributor.authorTront, Joseph G.en
dc.contributor.authorGroat, Stephenen
dc.contributor.authorDunlop, Matthewen
dc.contributor.authorMarchany, Randolph C.en
dc.contributor.departmentElectrical and Computer Engineeringen
dc.date.accessioned2018-07-19T16:54:24Zen
dc.date.available2018-07-19T16:54:24Zen
dc.date.issued2011-10en
dc.description.abstractAs protection against the current privacy weaknesses of StateLess Address AutoConfiguration (SLAAC) in the Internet Protocol version 6 (IPv6), network administrators may choose to deploy the new Dynamic Host Configuration Protocol for IPv6 (DHCPv6). Similar to the Dynamic Host Configuration Protocol (DHCP) for the Internet Protocol version 4 (IPv4), DHCPv6 uses a clientserver model to manage addresses in networks, providing statefol address assignment. While DHCPv6 can be configured to assign randomly distributed addresses to clients, the DHCP Unique Identifier (DUID) was designed to identify uniquely identify clients to servers and remains static to clients as they move between different subnets and networks. Since the DUID is globally unique and exposed in the clear, attackers can geotemporally track clients by sniffing DHCPv6 messages on the local network or by using unauthenticated protocol-valid queries that request systems' DUIDs or leased addresses. DUIDs can also be formed with systemspecific iriformation, forther compromising the privacy and security of the host. To combat the threat of the static DUID, a dynamic DUID was implemented and analyzed for its effect on privacy and security as well as its computational overhead. The privacy implications of DHCPv6 must be addressed before large-scale IPv6 deployment.en
dc.format.mimetypeapplication/pdfen
dc.identifier.doihttps://doi.org/10.1109/nasnit.2011.6111142en
dc.identifier.urihttp://hdl.handle.net/10919/84199en
dc.language.isoenen
dc.publisherIEEEen
dc.relation.ispartofThe 16th North-East Asia Symposium on Nano, Information Technology and Reliabilityen
dc.rightsIn Copyrighten
dc.rights.urihttp://rightsstatements.org/vocab/InC/1.0/en
dc.titleSecurity and Privacy produced by nHCP Unique Identifiersen
dc.typeConference proceedingen
dc.typePresentationen
dc.type.dcmitypeTexten

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
TrontnHCP2011.pdf
Size:
1.41 MB
Format:
Adobe Portable Document Format
Description:
Download

Collections

Scholarly Works, Electrical and Computer Engineering
Destination Area: Integrated Security (IS)