Abstract:Numerous measurement researches have been performed to discover the IPv4 network security issues by leveraging the fast Internet-wide scanning techniques. However, IPv6 brings the 128-bit address space and renders brute-force network scanning impractical. Although significant efforts have been dedicated to enumerating active IPv6 hosts, limited by technique efficiency and probing accuracy, large-scale empirical measurement studies under the increasing IPv6 networks are infeasible now. To fill this research gap, by leveraging the extensively adopted IPv6 address allocation strategy, we propose a novel IPv6 network periphery discovery approach. Specifically, XMap, a fast network scanner, is developed to find the periphery, such as a home router. We evaluate it on twelve prominent Internet service providers and harvest 52M active peripheries. Grounded on these found devices, we explore IPv6 network risks of the unintended exposed security services and the flawed traffic routing strategies. First, we demonstrate the unintended exposed security services in IPv6 networks, such as DNS, and HTTP, have become emerging security risks by analyzing 4.7M peripheries. Second, by inspecting the periphery's packet routing strategies, we present the flawed implementations of IPv6 routing protocol affecting 5.8M router devices. Attackers can exploit this common vulnerability to conduct effective routing loop attacks, inducing DoS to the ISP's and home routers with an amplification factor of \gt 200. We responsibly disclose those issues to all involved vendors and ASes and discuss mitigation solutions. Our research results indicate that the security community should revisit IPv6 network strategies immediately.

Based on IPv6 Network and 4G Network System Security Analysis and Research

Observations of IPv6 traffic

4G Mobile Communication Network System Security Faced with Threat Question Research

Analysis of GSM and GPRS Security

Research on Constructing Security and Reliable IPv6 Network

Study on Attacking and Defending Techniques in IPv6 Networks

Fast IPv6 Network Periphery Discovery and Security Implications

Research on DDoS Attacks in IPv6.

The Analysis of the Next Generation Internet Protocol's Security

Study of Security of IPSec Based on IPv 6

Research on 4over6 Technologies in IPv6 Edge Network

Discussion on a New Paradigm of Endogenous Security Towards 6G Networks

Exploiting collision between mobile IPv6 communication and firewall

IPv6 Security Test Model Research based on Cloud Computing Environment

Ipv4/Ipv6 Transition Technologies And Univer6 Architecture

Endogenous Security for the Space-Integrated-Ground Information Network in 6G

Empirical analysis and comparison of IPv4-IPv6 traffic: A case study on the campus network

Study on Man-in-the-Middle Attack and Defending Techniques in IPv6 Network

The Impending Deployment of NGI based on IPv6

Research papers: A study of traffic from the perspective of a large pure IPv6 ISP

Survey of Internet IPv6 Transition Technologies