DocumentCode :
1443582
Title :
Secure Neighbor Discovery: Review, Challenges, Perspectives, and Recommendations
Author :
AlSa´deh, Ahmad ; Meinel, Christoph
Author_Institution :
Hasso-Plattner-Institut
Volume :
10
Issue :
4
fYear :
2012
Firstpage :
26
Lastpage :
34
Abstract :
Neighbor Discovery Protocol (NDP) is one of the main protocols in IPv6 suite. However, it has no security mechanisms and is vulnerable to various attacks. Using an RSA key pair, cryptographically generated addresses, a digital signature, and X.509 certificates, Secure Neighbor Discovery (SEND) is designed to countermeasure NDP threats. Unfortunately, SEND deployment is still a challenge for several reasons. First, SEND is compute intensive. Second, its deployment isn´t trivial, and its authorization delegation discovery mechanism is theoretical rather than practical. Third, operating systems lack sophisticated SEND implementations. In this article, the authors give an overview of the SEND deployment challenges and review some of the proposals to optimize SEND to make it applicable.
Keywords :
Authorization; IP networks; Privacy; Protocols; Public key cryptography; CGAs; IPv6 security; cryptographically generated address; network-level security and protection;
fLanguage :
English
Journal_Title :
Security & Privacy, IEEE
Publisher :
ieee
ISSN :
1540-7993
Type :
jour
DOI :
10.1109/MSP.2012.27
Filename :
6148204
Link To Document :
بازگشت