A CGA Based IP Source Address Authentication Method in IPv6 Access Network

被引：0
|
作者：
Yao, Guang [1 ]
Bi, Jun [1 ]
机构：
[1] Tsinghua Univ, Network Res Ctr, Beijing 100084, Peoples R China
来源：
2008 IEEE 33RD CONFERENCE ON LOCAL COMPUTER NETWORKS, VOLS 1 AND 2 | 2008年
关键词：
CGA; Source Address Spoofing; IPv6 Access Network;
D O I：
暂无
中图分类号：
TP [自动化技术、计算机技术];
学科分类号：
0812 ;
摘要：
In this paper, we present a novel source address spoofing prevention method for EPv6 access network called CGA based Source Address Authentication (CSAA). It makes use of CGA (Cryptographically Generated Address) to generate an unspoofable identifier of host without PKI, and bind it to the authorized address of the host Then all the packets sent out by the host can be validated in the first-hop router by a light-weight method.
引用
收藏
页码：523 / 524
页数：2
相关论文
共 50 条
  • [21] Identity-based Hierarchical Access Authentication in Mobile IPv6 Networks
    Tian, Ye
    Zhang, Yujun
    Zhang, Hanwen
    Li, Zhongcheng
    2006 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS, VOLS 1-12, 2006, : 1953 - 1958
  • [22] Design and Implementation of Address Filtering in Network Handoff Based on IPv6
    Feng Guochang
    Chen Siguo
    Mou Heming
    Shi Xianwei
    Wei Da
    2012 11TH INTERNATIONAL SYMPOSIUM ON DISTRIBUTED COMPUTING AND APPLICATIONS TO BUSINESS, ENGINEERING & SCIENCE (DCABES), 2012, : 116 - 119
  • [23] On the issues of IP traceback for IPv6 and mobile IPv6
    Lee, HCJ
    Ma, M
    Thing, VLL
    Xu, Y
    EIGHTH IEEE INTERNATIONAL SYMPOSIUM ON COMPUTERS AND COMMUNICATION, VOLS I AND II, PROCEEDINGS, 2003, : 582 - 587
  • [24] Design and Implementation of an IPv6 Source Address Validation Device
    Yao, Guang
    Bi, Jun
    FOURTH INTERNATIONAL CONFERENCE ON NETWORKING AND SERVICES (ICNS 2008), PROCEEDINGS, 2008, : 236 - 241
  • [25] An IPv6 source address validation testbed and prototype implementation
    Bi, Jun
    Yao, Guang
    Wu, Jianping
    Journal of Networks, 2009, 4 (02) : 100 - 107
  • [26] Providing reliable IPv6 access service based on overlay network
    Leng, Xiaoxiang
    Bi, Jun
    Zhang, Miao
    ON THE MOVE TO MEANINGFUL INTERNET SYSTEMS 2006: OTM 2006 WORKSHOPS, PT 2, PROCEEDINGS, 2006, 4278 : 1500 - +
  • [27] The Design of the Network Service Access Control System through Address Control in IPv6 Environments
    Ahn, Youngjoo
    Ahn, Seongjin
    Chung, Jinwook
    INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND NETWORK SECURITY, 2006, 6 (06): : 174 - 179
  • [28] An Integrated Protection Method of Moving Target Defense and Access Control Based on IPv6 Network
    Li Z.
    Ding Y.
    Yuan F.
    Zhang K.
    Jisuanji Yanjiu yu Fazhan/Computer Research and Development, 2022, 59 (05): : 1105 - 1119
  • [29] Research on network address mapping algorithm in IPv6 private network
    Institute of Networking Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China
    J. China Univ. Post Telecom., SUPPL. 1 (11-16): : 11 - 16
  • [30] Enial-of-service, address ownership, and early authentication in the IPv6 world
    Nikander, P
    SECURITY PROTOCOLS, 2002, 2467 : 12 - 21
12345