Browse > Article
http://dx.doi.org/10.3745/KIPSTC.2007.14-C.1.027

Integrated Security Management with MCGA in IPv6 Network  

Oh, Ha-Young (이화여자대학교 컴퓨터학과)
Chae, Ki-Joon (이화여자대학교 컴퓨터학과)
Bang, Hyo-Chan (한국전자통신연구원)
Na, Jung-Chan (한국전자통신연구원 능동보안기술연구팀)
Publication Information
The KIPS Transactions:PartC / v.14C, no.1, 2007 , pp. 27-38 More about this Journal
Abstract
IPv6 has appeared for solving the address exhaustion of IPv4 and for guaranteeing the problems of security and QoS. It occurs the unexpected new attacks of IPv6 as well as the existing attacks of IPv4 because of the increasing address space to 128bits and the address hierarchies for efficient network management and additions of the new messages between nodes and routers like neighbor discovery and auto address configuration for the various comfortable services. For the successful transition from IPv4 to IPv6, we should get the secure compatibility between IPv4 hosts or routers working based on secure and systematic policy and IPv6. Network manager should design security technologies for efficient management in IPv4/IPv6 co-existence network and IPv6 network and security management framework designation. In this paper, we inspected the characteristics of IPv4 and IPv6, study on security requirement for efficient security management of various attacks, protocol, service in IPv4/IPv6 co-existence and IPv6 network, and finally suggest integrated solution about security vulnerability of IPv6 network in considering of analysis of IPv6 system, host and application, IPv6 characteristics, modified CGA(MCGA).
Keywords
IPv6 network; security; CGA; MCGA;
Citations & Related Records
연도 인용수 순위
  • Reference
1 R. Atkson, 'RFC-1825: Security Architecture for the Internet Protocol', Network Working Group, August 1995
2 T. Narten, E.Nordmark, W.Simpson, 'RFC-2461: Neighbor Discovery for IP Version 6(IPv6)', Network Working Group, December 1998
3 S. Deering, R. Hinden, 'RFC-1883: Internet Protocol, Version 6 (IPv6) Specification', Network Working Group, December 1995
4 R. Hinden, S.Deering, 'RFC-2373: IP Version 6 Addressing Architecture', Networking Working Group, July 1998
5 Y. Rekhter, P. Lothberg, R. Hinden, S. Deering, J. Postel, 'RFC-2073: An Ipv6 Provider-Based Unicast Address Format', Network Working Group, January 1997
6 Y. Rekhter, P. Lothberg, R. Hinden, S. Deering, J. Postel, 'Internet-draft: An IPv6 Provider-Based Unicast address Format', March 1997 draft-ietf-ipngwg-ipv6-arch-00.txt
7 R. Atkinson, 'RFC-1827: IP Encapsulating Security Payload (ESP)', Network Working Group, August 1995
8 IPv6 and IPv4 Threat Comparison and Practice Evaluation (v1.0), cisco
9 S. Thomson, T. Narten, T. Jinmei, 'Internet-Draft: IPv6 Stateless Address Autoconfiguration', May 2005
10 A. Conta, S.Deering, 'RFC-2463: Internet Control Message Protocol(ICMPv6) for the Internet Protocol Version 6(IPv6) Specification', Networking Working Group, December 1998
11 T. Aura, 'RFC-3972: draft-ietf-send-cga-06.txt', March 2005