Citation

Carjuman, Navaneethan and Ma Bin Suhaidi, Zharfan Mirza Hafiy and Hlaing, Zar Chi and Ramadass, Sureswaran (2025) Enhanced Mechanism to Detect IPv6 Extension Header Misuse in the IPv6 Network. In: 2025 International Conference on Informatics, Multimedia, Cyber and Information System (ICIMCIS), 03-04 December 2025, Jakarta, Indonesia.

Text 24.pdf - Published Version Restricted to Repository staff only Download (1MB)

Abstract

The depletion of Internet Protocol version 4 (IPv4) addresses is speeding up the entire world’s transition to Internet Protocol version 6 (IPv6), which provides a larger pool of addresses and offers extensible features like Extension Headers (EH). These improvements come at the cost of new security challenges due to the added functionality, even though it is more scalable. The most significant one is the tiny fragment attack, in which very small, and thus suspicious, fragments are created that bypass inspection and confuse the reassembly process. The conventional Machine Learning (ML) models are featured by high computational demands that cannot be used with resource-constrained systems. To address this limitation, a lightweight-based K-Nearest Neighbor (KNN) weighted Euclidean distance identification system is presented, which emphasizes the packet size and fragmentation behavior as key indicators of malicious action. To test it, an artificial dataset of 100,000 packets with benign, malicious, and noise traffic was developed. The results of the experiments indicate an accuracy, recall and F1-score of 96% to prove that the proposed lightweight KNN mechanism is effective in detecting IPv6 tiny fragment attacks at minimum computational cost.

Item Type:	Conference or Workshop Item (Paper)
Uncontrolled Keywords:	IPv6, Extension Header, Fragmentation, Tiny Fragment Attack, Anomaly Detection, K-Nearest Neighbour
Subjects:	T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK5101-6720 Telecommunication. Including telegraphy, telephone, radio, radar, television
Divisions:	Faculty of Computing and Informatics (FCI)
Depositing User:	Ms Suzilawati Abu Samah
Date Deposited:	20 Apr 2026 03:59
Last Modified:	20 Apr 2026 03:59
URII:	http://shdl.mmu.edu.my/id/eprint/15780

Downloads

Edit (login required)