Enhanced Trust-based Security Mechanism to Prevent Temporal DoS Vulnerabilities in IPv6 Link-Local Networks

Citation

Fadzil, Lokman Mohd and Hasbullah, Iznan Husainy and Manickam, Selvakumar and Praptodiyono, Supriyanto and Ishak, Mohamad Khairi (2026) Enhanced Trust-based Security Mechanism to Prevent Temporal DoS Vulnerabilities in IPv6 Link-Local Networks. Journal of Informatics and Web Engineering, 5 (2). p. 70. ISSN 2821-370X

[img] Text
sucheng,+1891-Article+Text-Final.pdf - Published Version
Restricted to Repository staff only

Download (1MB)

Abstract

Many computer networks in operation today currently use both IPv4 and IPv6 stacks. On the other hand, there is a transition towards IPv6-only networks as a result of the limited availability of IPv4 addresses. The primary protocol for link-local IPv6 communication is the Neighbor Discovery Protocol (NDP). Regrettably, its insecure design and basic scope-based security mechanisms make the local network susceptible to insider threats. The Internet Engineering Task Force’s recommended security mechanism for NDP, which is Secure Neighbor Discovery (SEND), is well documented but complex and unsuitable for resource-constrained devices and networks. Trust-ND was positioned as an alternative to SEND as a lightweight trust-based distributed approach using the NDP extension headers. However, its timestamp design and utilization render it susceptible to temporal DoS vulnerabilities. Therefore, this research proposes eTrustND to improve the Trust-ND mechanism for securing IPv6 link-local networks from insider attacks by addressing the existing vulnerabilities by modifying the timestamp reference, format, precision, and validation rules. This paper documents the methodology, the experimentation, and the resulting outcome that show eTrustND eliminates Trust-ND’s temporal DoS vulnerabilities without adding computational and protocol overhead. It also highlights the challenges and best practices of timestamp design and usage in security mechanisms and protocols.

Item Type: Article
Uncontrolled Keywords: IPv6, Denial-Of-Service, Link-Local Network, Network Security, Trust-Based Security Protocol
Subjects: Q Science > QA Mathematics > QA71-90 Instruments and machines > QA75.5-76.95 Electronic computers. Computer science
Divisions: Others
Depositing User: Ms Suzilawati Abu Samah
Date Deposited: 09 Jul 2026 02:48
Last Modified: 09 Jul 2026 02:48
URII: http://shdl.mmu.edu.my/id/eprint/16314

Downloads

Downloads per month over past year

View ItemEdit (login required)