IPv6 Neighbor Discovery Protocol Specifications, Threats and Countermeasures: A Survey
Neighbor discovery protocol (NDP) is the core protocol of Internet protocol version 6 (IPv6) suite. The motive behind NDP is to replace address resolution protocol (ARP), router discovery, and redirect functions in Internet protocol version 4. NDP is known as the stateless protocol as it is utilized...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2017-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/8022867/ |
| _version_ | 1818914498278326272 |
|---|---|
| author | Amjed Sid Ahmed Mohamed Sid Ahmed Rosilah Hassan Nor Effendy Othman |
| author_facet | Amjed Sid Ahmed Mohamed Sid Ahmed Rosilah Hassan Nor Effendy Othman |
| author_sort | Amjed Sid Ahmed Mohamed Sid Ahmed |
| collection | DOAJ |
| description | Neighbor discovery protocol (NDP) is the core protocol of Internet protocol version 6 (IPv6) suite. The motive behind NDP is to replace address resolution protocol (ARP), router discovery, and redirect functions in Internet protocol version 4. NDP is known as the stateless protocol as it is utilized by the IPv6 nodes to determine joined hosts as well as routers in an IPv6 network without the need of dynamic host configuration protocol server. NDP is susceptible to attacks due to the deficiency in its authentication process. Securing NDP is extremely crucial as the Internet is prevalent nowadays and it is widely used in communal areas, for instance, airports, where trust does not exist among the users. A malicious host is able to expose denial of service or man-in-the-middle attacks by injecting spoofed address in NDP messages. With the intention to protect the NDP many solutions were proposed by researchers. However, these solutions either introduced new protocols that need to be supported by all nodes or built mechanisms that require the cooperation of all nodes. Moreover, some solutions are deviating from the layering principals of open system interconnection model. Therefore, the necessity to study NDP in details to recognize and identify the points that could be a source of enhancement has become mandatory task. This article revolves around the survey of the vulnerabilities mitigations approaches of NDP, since the time of the protocol development up to the date of finalized this paper. We described the technical specifications of NDP showing its components, functions, and working procedures. In addition, each threat of NDP is classified and explained in details. Open challenges of NDP and recommended future directions for scientific research are presented at the end of this paper. |
| first_indexed | 2024-12-19T23:47:20Z |
| format | Article |
| id | doaj.art-279c100859754d1ab5c13a85d4a74109 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-12-19T23:47:20Z |
| publishDate | 2017-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-279c100859754d1ab5c13a85d4a741092022-12-21T20:01:15ZengIEEEIEEE Access2169-35362017-01-015181871821010.1109/ACCESS.2017.27375248022867IPv6 Neighbor Discovery Protocol Specifications, Threats and Countermeasures: A SurveyAmjed Sid Ahmed Mohamed Sid Ahmed0https://orcid.org/0000-0003-1236-1893Rosilah Hassan1Nor Effendy Othman2https://orcid.org/0000-0003-4563-9126Network and Communication Technology Laboratory (NCT), Research Centre for Software Technology and Management (SOFTAM), Faculty of Information Science and Technology (FTSM), Universiti Kebangsaan Malaysia (UKM), Bangi, MalaysiaNetwork and Communication Technology Laboratory (NCT), Research Centre for Software Technology and Management (SOFTAM), Faculty of Information Science and Technology (FTSM), Universiti Kebangsaan Malaysia (UKM), Bangi, MalaysiaNetwork and Communication Technology Laboratory (NCT), Research Centre for Software Technology and Management (SOFTAM), Faculty of Information Science and Technology (FTSM), Universiti Kebangsaan Malaysia (UKM), Bangi, MalaysiaNeighbor discovery protocol (NDP) is the core protocol of Internet protocol version 6 (IPv6) suite. The motive behind NDP is to replace address resolution protocol (ARP), router discovery, and redirect functions in Internet protocol version 4. NDP is known as the stateless protocol as it is utilized by the IPv6 nodes to determine joined hosts as well as routers in an IPv6 network without the need of dynamic host configuration protocol server. NDP is susceptible to attacks due to the deficiency in its authentication process. Securing NDP is extremely crucial as the Internet is prevalent nowadays and it is widely used in communal areas, for instance, airports, where trust does not exist among the users. A malicious host is able to expose denial of service or man-in-the-middle attacks by injecting spoofed address in NDP messages. With the intention to protect the NDP many solutions were proposed by researchers. However, these solutions either introduced new protocols that need to be supported by all nodes or built mechanisms that require the cooperation of all nodes. Moreover, some solutions are deviating from the layering principals of open system interconnection model. Therefore, the necessity to study NDP in details to recognize and identify the points that could be a source of enhancement has become mandatory task. This article revolves around the survey of the vulnerabilities mitigations approaches of NDP, since the time of the protocol development up to the date of finalized this paper. We described the technical specifications of NDP showing its components, functions, and working procedures. In addition, each threat of NDP is classified and explained in details. Open challenges of NDP and recommended future directions for scientific research are presented at the end of this paper.https://ieeexplore.ieee.org/document/8022867/IPv6NDPSENDCGA |
| spellingShingle | Amjed Sid Ahmed Mohamed Sid Ahmed Rosilah Hassan Nor Effendy Othman IPv6 Neighbor Discovery Protocol Specifications, Threats and Countermeasures: A Survey IEEE Access IPv6 NDP SEND CGA |
| title | IPv6 Neighbor Discovery Protocol Specifications, Threats and Countermeasures: A Survey |
| title_full | IPv6 Neighbor Discovery Protocol Specifications, Threats and Countermeasures: A Survey |
| title_fullStr | IPv6 Neighbor Discovery Protocol Specifications, Threats and Countermeasures: A Survey |
| title_full_unstemmed | IPv6 Neighbor Discovery Protocol Specifications, Threats and Countermeasures: A Survey |
| title_short | IPv6 Neighbor Discovery Protocol Specifications, Threats and Countermeasures: A Survey |
| title_sort | ipv6 neighbor discovery protocol specifications threats and countermeasures a survey |
| topic | IPv6 NDP SEND CGA |
| url | https://ieeexplore.ieee.org/document/8022867/ |
| work_keys_str_mv | AT amjedsidahmedmohamedsidahmed ipv6neighbordiscoveryprotocolspecificationsthreatsandcountermeasuresasurvey AT rosilahhassan ipv6neighbordiscoveryprotocolspecificationsthreatsandcountermeasuresasurvey AT noreffendyothman ipv6neighbordiscoveryprotocolspecificationsthreatsandcountermeasuresasurvey |