A Firewall Model for Mobile IPV6

Xiu Zhihua,Lu Hancheng,Li Jinsheng,Hong Peilin

DOI: https://doi.org/10.3321/j.issn:1002-8331.2006.06.036

2006-01-01

Abstract:The paper proposes a firewall model based on asymmetrical keys.Cooperating with a new IPv6 extension header—signature authentication header,it’s feasible for mobile IPv6 communication to go through the firewall after authenticating the special packages from outside of the firewall.

What problem does this paper attempt to address?

A Reference Model And System Architecture For Database Firewall

L Cai,Xh Yang

DOI: https://doi.org/10.1109/ICSMC.2005.1571196

2005-01-01

Abstract:More and more network attacks are focusing on application level vulnerabilities. Recently, several examples of this trend have been highly publicized such as the SQL Slammer and SQL Snake attacks. Traditional firewalls, used for protecting the database, only prevent attacks searching for vulnerabilities. Database firewalls take defense deep into the organization by providing full syntax control and audit of the SQL AN stream before it reaches the database, and enforcing content-driven access to database. This paper proposes a layered reference model for database firewalls by enhancing the capability of COAST Laboratory's model. It separates a database firewall into three layers (network layer, schematic layer and semantic layer) according to the knowledge, computation target, and the control granularity of each layer. Based on this model, a database firewall product had been prototyped It can greatly improve the database security by introducing self-controlled authentication principal mapping, object mapping, and mandatory access control modules.
Exploiting collision between mobile IPv6 communication and firewall

WANG Feng,MIN Zhi-song,WANG Qing-xian

DOI: https://doi.org/10.3969/j.issn.1000-7024.2007.11.022

2007-01-01

Abstract:With the development of network science,the substitution of IPv6 for IPv4 becomes a trend.IPv6 has more support for mobile IP.However,there is a problem that the firewalls could not deal with the mobile IPv6 datagrarn properly nowadays.Based on the analysis of the communication mechanism of mobile IPv6 and the firewall's datagram-filter property,various kinds of collision between mobile IPv6's communication mechanism and existing firewall diagram-filter rules separately are discussed.Finally,a conclusion of the cause of collision is drawn and is put out the solving.
Mobile IPv6 and Networking Security

夏士雄,王东明,常征

DOI: https://doi.org/10.3969/j.issn.1000-7024.2002.12.004

2002-01-01

Abstract:Nowadays, the mobile Internet business is developing fast. So it need more advanced networking security. But thecurrent IPv4 can not fit for this request. This paper introduces a more advanced secure networking protocol-mobile IPv6 andits security mechanism. This paper also discusses some existing problems in mobile IPv6 and resolutions.
Mobile firewall: A framework to isolate intruders in wireless mesh networks

Ping Yi,Xinghao Jiang,Jianhua Li

2007-01-01

Journal of Computational Information Systems

Abstract:As wireless networks are becoming ubiquitous, their security is gaining in importance. The nature of wireless mesh networks makes them vulnerable to security attacks. In this paper, we propose the architecture of cooperation intrusion response based multi-agent. The architecture is composed of mobile agents. Monitor agent resides on every node and monitors its neighbor nodes. Decision agent collects information from monitor nodes, and detects an intrusion by security policies. When an intruder is found in the architecture, the block agents will get to the neighbor nodes of the intruder and formed the mobile firewall to isolate the intruder. In the end, we evaluate it by simulation.
Secure Mobile Communication Scheme Based on IPv6-IPSec

谭婷,宁闪,宋健,张宝杰

DOI: https://doi.org/10.3969/j.issn.1671-1815.2009.17.027

2009-01-01

Abstract:Based on a deep study of the existing scheme of IPv6 end-to-end secure channels for closed members and IPSec protocols,combining mobile nodes characteristic in mobile IPv6 network,a new extended secure communications scheme is proposed for mobile IPv6.By introducing several distributed network management nodes,and using Mobile IKE(MOBIKE)instead of existing IKE protocol,the existing proposal is appled into mobile IPv6 network environment properly.Finally,the proposal is verified by simulation and analysis of this scheme.
Research of a Comprehensive IPv4/IPv6 Firewall System Based on Network Processor

ZHONG Ting,LIU Yong,LI Zhi-jun,QIN Zhi-guang

DOI: https://doi.org/10.3321/j.issn:1000-436x.2006.02.022

2006-01-01

Abstract:Research was done on security equipments in the environment of coexistence of IPv4 and IPv6.The firmware and software structure of a Comprehensive IPv4/IPv6 Firewall System was introduced.The design made full use of multithread and multiprocessor characters of Intel IXP2400.The firewall system designed has good performance and is useful in the next generation Internet.
A Novel IPv6 Communication Framework: Mobile SHIM6 (M-SHIM6)

Tian Chen,Liu Wenyu

DOI: https://doi.org/10.1109/wicom.2006.362

2006-01-01

Abstract:A novel communication framework M-SHIM6 is presented in this paper. By combining ideas from both SHIM6 and Mobile IPv6, the framework provides Host Identity, Mobility and Multi-homing simultaneously for an IPv6 host and still maintains backward compatibility with other IPv6 nodes. After related works, this paper presents the system model and its universal communication model. The benefits of its deployment are also given.
Design and Implementation of Mobile IPv6 with IPSec on IPv6 Router

LV Ji-ping,XU Ming-wei,GU Ming,XU Ke

DOI: https://doi.org/10.3969/j.issn.1000-1220.2006.07.014

2006-01-01

Abstract:To enable mobile nodes to maintain connectivity to the network when moving from one access router to another,and protect mobile nodes from being attacked,mobile IPv6 with IPSec was designed and implemented on IPv6 Router.In this paper design and implementation of mobile IPv6 with IPSec is introduced.Key technologies such as how Mobile IPv6 Router intercepts and forwards data destinated to mobile Nodes and how to protect messages between mobile nodes and Mobile IPv6 Router with IPSec are discussed in detail.
A Framework Model Integrating Network Intrusion Detection Systems and Firewalls

Ke CHEN,Zhi-tang Li

DOI: https://doi.org/10.3969/j.issn.1007-130X.2001.02.007

2001-01-01

Abstract:At first,this paper analyzes the we aknesses of firewalls and network intrusion detection systems which are widely used today.Then,an integrated framework model is presented,and the security enhanc ement enabled by the integration is also discussed.Finally,this paper puts forwa rd suggestions on future work.
A Study of Authentication of Mobile IPv6 Binding Update Based on Address Encryption

Wagn Bin,Dong Liu

2007-01-01

Computer Science

Abstract:Mobile IPv6 enables a mobile node to access network at any location in next generation Intemet.This paper analyzes the main security problems of mobile IPv6 protocol,discusses the problems occurred in the current solving schemes,and proposes a binding update authentication scheme of mobile IPv6 based on address encryption.Finally,a security analysis of the scheme has been made.This scheme is used public key cryptosystem,but it is not need the sup- port of public key infrastructure(PKI),and can confront popular attacks,such as impersonation attack.
Survey of Authentication in Mobile IPv6 Network

Huiping Sun,Junde Song,Zhong Chen

DOI: https://doi.org/10.1109/CCNC.2010.5421695

2010-01-01

Abstract:Mobile IPv6 is a very important part in the mobile computing for global Internet. However, there are some vulnerability and attacks in the current mobile IPv6 such binding update and MITM. Therefore, the safe and flexible model to authenticate every entity is required. This paper studies the existing security problems in the current mobile IPv6; meanwhile, we summary and analyze the existing authentication technology, protocols, infrastructures in the current mobile IPv6 and give the overview of this area.
An Effective Access Control Approach to Support Mobility in IPv6 Networks

XH Peng,C Lin

DOI: https://doi.org/10.1117/12.635317

2005-01-01

Abstract:Access control is an important method to improve network security and prevent protected resources from being used by some nodes without authority. Moreover, mobility is an important trend of internet. In this paper, based on the architecture of hierarchical mobile IPv6, we proposed an effective access control approach to support mobility in IPv6 networks, which can ensure the operation of access control when a mobile node roams in these domains with different polices, with decreased delay of access negotiation and cost of delivering messages.
Access path based source address validation in mobile IPv6

Zhu Min,Xu Ke,Li Qi

DOI: https://doi.org/10.1007/978-3-642-24403-2_26

2011-01-01

Abstract:Mobile IPv6 runs high risk of being attacked by IP spoofing due to the introduction of mobility and route optimization. In this paper, an authentic IP address validation scheme is proposed to protect mobile nodes in Mobile IPv6 against IP spoofing attack. The mobile nodes' historical traffic information is leveraged to validate the authenticity of its claimed home address in the scheme. Compared with other authentication schemes, this scheme is much simpler to implement and easier to deploy based on the usage of real data, and does not require additional computational overhead. It also solves the address ownership problem and the unauthenticated binding update issue in Mobile IPv6. Real traces are used to demonstrate the applicability of the scheme in this paper. The experimental results show that only three consecutive historical packet records are required to construct a unique authentication key, which can identify forged home address efficiently.
Securing Ad Hoc networks by mobile firewall

Ping Yi,Yue Wu,Jianhua Li

2007-01-01

Journal of Information and Computational Science

Abstract:Mobile ad hoc networking offers convenient infrastructureless communication over the shared wireless channel. However, the nature of ad hoc networks makes them vulnerable to security attacks. Existing security technologies such as intrusion prevention and intrusion detection are passive in response to intrusions in that their countermeasures are only to protect the networks and there is no automated, network-wide counteraction against detected intrusions. While they all play an important role in counteracting intrusion, they do not, however, effectively address the root cause of the problem-intruders. In this paper, we propose the architecture of cooperation intrusion response based muti-agent. When an intruder is found in our architecture, the block agents will get to the neighbor nodes of the intruder and formed the mobile firewall to isolate the intruder. In the end, we illustrate our architecture by an example and evaluate it by simulation.
Based on IPv6 Network and 4G Network System Security Analysis and Research

Xin Min Wu,Hao Shu Wu

DOI: https://doi.org/10.4028/www.scientific.net/amm.530-531.773

2014-01-01

Applied Mechanics and Materials

Abstract:First, as the 4G network, the introduction of IPv6 network layer security mechanism, security is enhanced at the same time, IPv6 security mechanism applied to the 4G network system security as well as new demands and challenges, followed by the core network based on IPv6 network security to face the next 4G threats and security problems, concludes with IPv6 technical analysis and 4G network defense and countermeasures.
A New Secure Model for IoT Devices

Zhe Weng,Renjie Liu,Xing Li

DOI: https://doi.org/10.1109/itoec49072.2020.9141750

2020-01-01

Abstract:The rapid development of Internet of Things makes corresponding secure issues, such as invasions from the Internet, more and more concerned. And the growing quantity of IoT devices takes the IPv6 network into consideration. In this paper, we introduce a model to enhance the IoT device security. We use two mechanisms in this model. One is addressless, which hides IoT devices against invasions by using vast IPv6 address space. The other is watchdog, which supervises that the IoT device is under control correctly. By these mechanisms, we can ensure the security of IoT devices by vast address space in IPv6, verify the validity of messages for IoT devices, and avoid the IoT devices from security issues caused by lack of management.
S_firewall: A Firewall In Wireless Sensor Networks

Jianqing Ma,Ping Yi,Yiping Zhong,Shiyong Zhang

DOI: https://doi.org/10.1109/WiCOM.2006.280

2006-01-01

Abstract:Wireless Sensor Networks (WSNs) have wide applications both in military and civil fields. However, when deployed in untended/hostile area, WSNs may suffer all kinds of attacks like flooding Sinkhole, etc. To apply WSNs more practically and wildly, some secure countermeasures must be deployed in WSNs. In this paper, we design a kind of firewall scheme, which based on mobile agent, to isolate the intruder with less communication overhead and memory cost. The S_Firewall can be generated automatically, distributively and in real time when network-wide attacks happen. The paper also proposes a route restoring scheme by local repair and makes a performance analysis by prototype implementation of S_Firewall.
Key Management and Authentication for Mobile IP

Jin He,Tie Ling,Li Jianhua

DOI: https://doi.org/10.3969/j.issn.1009-8054.2006.02.039

2006-01-01

Abstract:The fundamental principles of Mobile IP is analyzed in the paper. According to its security problems and integrating with IPSec protocol related conception a key management and authentication solution for Mobile IP is proposed.
Implementation of Mobile IP Based on the IPv6

余冬梅,赵文来,张秋余

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.11.066

2002-01-01

Abstract:The paper discusses the route optimization ane security of the mobile Ip based on the Ipv6 after reviewing the mobile IP based on the IPv4, at last, the paper gives the algorithm process about identity authentication.
A novel interfacing solution to make IKEv2 work in MIPv6 environment

Ke Xu,Minpeng Qi,Haitao Li,Peng Yang,Hui Deng

DOI: https://doi.org/10.1109/ICCW.2008.91

2008-01-01

Abstract:In IETF, Mobile IPv6 signaling and data must be protected by IP security association, while IKEv2 is recommended to make dynamical IPSec security association maintenance. But when mobile node bootstrapped in foreign net work or handover to a new network, IKEv2 cannot get information about MIPv6 to negotiate right IP security associations, which will incur bootstrap failure and long handover delay. In this paper, a novel solution is proposed to interface IKEv2 and MIPv6 for information sharing and mobility detection. In according with our evaluation result, this solution could solve bootstrap problem and reduce the handover delay greatly. ©2008 IEEE.

A Firewall Model for Mobile IPV6

A Reference Model And System Architecture For Database Firewall

Exploiting collision between mobile IPv6 communication and firewall

Mobile IPv6 and Networking Security

Mobile firewall: A framework to isolate intruders in wireless mesh networks

Secure Mobile Communication Scheme Based on IPv6-IPSec

Research of a Comprehensive IPv4/IPv6 Firewall System Based on Network Processor

A Novel IPv6 Communication Framework: Mobile SHIM6 (M-SHIM6)

Design and Implementation of Mobile IPv6 with IPSec on IPv6 Router

A Framework Model Integrating Network Intrusion Detection Systems and Firewalls

A Study of Authentication of Mobile IPv6 Binding Update Based on Address Encryption

Survey of Authentication in Mobile IPv6 Network

An Effective Access Control Approach to Support Mobility in IPv6 Networks

Access path based source address validation in mobile IPv6

Securing Ad Hoc networks by mobile firewall

Based on IPv6 Network and 4G Network System Security Analysis and Research

A New Secure Model for IoT Devices

S_firewall: A Firewall In Wireless Sensor Networks

Key Management and Authentication for Mobile IP

Implementation of Mobile IP Based on the IPv6

A novel interfacing solution to make IKEv2 work in MIPv6 environment