ICMPv6 Echo Request Ddos Attack Detection Framework Using Backpropagation Neural Network

Mohammed Ahmed Saad, Redhwan (2016) ICMPv6 Echo Request Ddos Attack Detection Framework Using Backpropagation Neural Network. PhD thesis, Universiti Sains Malaysia.

Preview

PDF Download (1MB) | Preview

Abstract

Pertumbuhan pesat Internet dalam beberapa tahun kebelakangan ini telah mendedahkan had ruang alamat dalam protokol Internet semasa (IP), iaitu, IPv4. Permintaan yang semakin meningkat dalam penggunaan alamat IP telah mengakibatkan kehabisan alamat IPv4 seperti yang dijangkakan. Untuk menangani kebimbangan ini, IPv6 baru telah dibangunkan untuk menyediakan ruang alamat yang mencukupi. IPv6 dimuatkan dengan protokol baru, iaitu, versi Protokol Mesej Kawalan Internet 6 (ICMPv6), dan protokol baru ini membuka pintu bagi penyerang untuk menyerang rangkaian IPv6. Salah satu jenis serangan yang paling kerap dalam rangkaian IPv6 pada lapisan rangkaian adalah satu serangan banjir ICMPv6 DoS / DDoS. Laporan Arbor Network pada tahun 2014 menunjukkan bahawa ancaman terhadap IPv6 semakin meningkat (72% merupakan kebanjiran trafik/serangan DDoS). Di samping itu, ICMPv6 adalah protokol wajib dalam rangkaian IPv6 tidak seperti dalam IPv4, iaitu ICMP boleh disekat atau diturunkan melalui get laluan lalai. The rapid growth of the Internet in the last few years have exposed the limitation of address space in the current Internet protocol (IP) namely IPv4, due to the increasing consumption of IP addresses. The IPv6 has been developed to provide sufficient address space. It ships with a new protocol. i.e., the Internet Control Message Protocol version 6 (ICMPv6), this protocol is a mandatory protocol in IPv6 networks unlike in IPv4, in which ICMP can be blocked or dropped. ICMPv6 opens the door for attackers to attack IPv6 networks. The most frequent types of attack in IPv6 networks at the network layer is an ICMPv6 DDoS flooding attack. One of the main problem in ICMPv6 DDoS flooding attacks is accuracy detection, which suffers from a high false alarm rate. Thus, protecting infrastructure service is a critical issue that urgently needs to be addressed.

Item Type:	Thesis (PhD)
Subjects:	Q Science > QA Mathematics > QA75.5-76.95 Electronic computers. Computer science
Divisions:	Pusat IPv6 Termaju Negara (National Advanced IPv6 Centre of Excellence NAv6) > Thesis
Depositing User:	Mr Noorazilan Noordin
Date Deposited:	25 Jan 2017 09:14
Last Modified:	12 Apr 2019 05:25
URI:	http://eprints.usm.my/id/eprint/31820

Actions (login required)

View Item