This research deals with the introduction of a new network functionality based on Identifier-Locator Network Protocol version 6 (ILNPv6), and Domain Name System (DNS). The chosen area of concern is security and specifically mitigation of Distributed Denial of Service (DDoS). The functionality proposed and tested deals with the issues of vulnerability testing, probing, and scanning which directly lead to a successful DDoS attack. The solutions presented can be used as a reactive measure to these security issues. The DDoS is chosen because in recent years DDoS have become the most common and hard to defend attacks. These attacks are on the availability of system/site. There are multiple solutions in the literature but no one solution is based on ILNPv6, and are complex in nature. Similarly, the solutions in literature either require modification in the providers’ networks or they are complex if they are only site-based solutions. Most of these solutions are based on IPv6 protocol and they do not use the concept of naming, as proposed by ILNPv6.

The prime objectives of this research are:

• to defend against DDoS attacks with the use of naming and DNS
• to increase the attacker’s effort, reduce vulnerability testing, and random probing by attackers
• to practically demonstrate the effectiveness of the ILNPv6-based solution for security

Event details

• When: 18th May 2017 13:00 - 14:00
• Where: Cole 1.33b
• Series: Systems Seminars Series
• Format: Seminar