Abstract:Numerous measurement researches have been performed to discover the IPv4 network security issues by leveraging the fast Internet-wide scanning techniques. However, IPv6 brings the 128-bit address space and renders brute-force network scanning impractical. Although significant efforts have been dedicated to enumerating active IPv6 hosts, limited by technique efficiency and probing accuracy, large-scale empirical measurement studies under the increasing IPv6 networks are infeasible now. To fill this research gap, by leveraging the extensively adopted IPv6 address allocation strategy, we propose a novel IPv6 network periphery discovery approach. Specifically, XMap, a fast network scanner, is developed to find the periphery, such as a home router. We evaluate it on twelve prominent Internet service providers and harvest 52M active peripheries. Grounded on these found devices, we explore IPv6 network risks of the unintended exposed security services and the flawed traffic routing strategies. First, we demonstrate the unintended exposed security services in IPv6 networks, such as DNS, and HTTP, have become emerging security risks by analyzing 4.7M peripheries. Second, by inspecting the periphery's packet routing strategies, we present the flawed implementations of IPv6 routing protocol affecting 5.8M router devices. Attackers can exploit this common vulnerability to conduct effective routing loop attacks, inducing DoS to the ISP's and home routers with an amplification factor of \gt 200. We responsibly disclose those issues to all involved vendors and ASes and discuss mitigation solutions. Our research results indicate that the security community should revisit IPv6 network strategies immediately.

On the Dynamics of IP Address Allocation and Availability of End-Hosts

Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation

Reasons Dynamic Addresses Change

EIPSIM: Modeling Secure IP Address Allocation at Cloud Scale

Secure IP Address Allocation at Cloud Scale

Beyond Counting: New Perspectives on the Active IPv4 Address Space

A Taxonomy and Comparative Analysis of IPv4 ID Selection Correctness, Security, and Performance

Exploiting the IPID field to infer network path and end-system characteristics

An Investigation of the Internet’s IP-layer Connectivity

Towards a More Accurate Availability Evaluation in Peer-to-peer Storage Systems

Down for Failure: Active Power Status Monitoring

Saving Brian's Privacy: the Perils of Privacy Exposure through Reverse DNS

The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments

Predicting the Impact of Measures Against Unauthorized Downloads on the Transient Behaviors of P 2 P Networks Extended Abstracts

Your Router is My Prober: Measuring IPv6 Networks Via ICMP Rate Limiting Side Channels

Fast IPv6 Network Periphery Discovery and Security Implications

Impact of Availability in P2P File Sharing System Caused by Active Peers

Predicting the Impact of Measures Against P2P Networks: Transient Behavior and Phase Transition

On the stability of network distance estimation.

An Algebraic Approach to Practical and Scalable Overlay Network Monitoring.

Aggressive Internet-Wide Scanners: Network Impact and Longitudinal Characterization