A more secure IPv6 neighborhood process
share
The process of neighborhood establishment in an IPv6 network is made out through the NDP (Neighbor Discovery Protocol). Using ICMPv6 messages (NS - Neighbor Solicitation and NA - Neighbor Advertisement) which contains the IP address to be resolved, is exposed during the exchange of messages, making communication vulnerable to various types of attacks. This paper presents a proposal for a safer neighborhood establishment using the DH and HMAC algorithms. Experiments were performed in virtualized environments with the objective of analyzing the efficiency of the modification proposed in the NDP.
READ FULL TEXT