Safety review in implementing services over IPv6
DOI:
https://doi.org/10.17981/ingecuc.12.1.2016.09Keywords:
DHCP, FTP, SSH, IPv6, IPsec, protocol, securityAbstract
Actually, transmission and interconnection systems have several vulnerabilities including the facility to analyze traffic that allows a high rate of attacks own IPv4 protocol, therefore it is necessary for services such as FTP, DHCP and SSH seek Migration and Deployment to IPv6 networks. It has characteristics of computer security by IPSEC protocol, regardless of the free operating system or own end customers. This paper analyzes by testing the functionality of the standard settings or IPv6 protocol and its security features in the implementation and setting in a controlled environment to mitigate attacks on authentication, integrity and confidentiality of information, allowing to determine which scenario services analyzed guarantee a higher level of own native IPSEC reliability through regardless of the medium on which data travelDownloads
Download data is not yet available.
References
R. Bare-o Gutiérrez, Elaboración de un estado de arte sobre el protocolo IPV6; y su implementación sobre protocolos de enrutamiento dinámico como RIPNG, EIGRP y OSPF basado sobre la plataforma de equipos Cisco. Bucaramanga: Universidad Pontificia Bolivariana, 2011.
W. Lee, S. S. H. Park y C. Lim, "Server authentication for blocking unapproved WOW access," in 2014 International Conference on Big Data and Smart Computing (BIGCOMP), 2014, pp. 155–159. http://dx.doi.org/10.1109/BIGCOMP.2014.6741427
T. Chown, "IPv6 Campus Transition Experiences," in 2005 Symposium on Applications and the Internet Workshops (SAINT 2005 Workshops), 2005, pp. 46–49. http://dx.doi.org/10.1109/SAINTW.2005.1619975
I. Beijnum, "An FTP Application Layer Gateway (ALG) for IPv6-to-IPv4 Translation.", 2011. [Online]. Available: https://tools.ietf.org/html/rfc6384
J. C. Becerra Cobos, J. R. Simbaqueva Buitrago y A. F. Valenzuela Suárez, "Dise-o e implementación de redes IPv6 en MIPYMES: caso laboratorio de informática," Esc. Colomb. Ing. Julio Garavito, pp. 1–8, 2013.
T. Sanguankotchakorn y M. Somrobru, "Performance Evaluation of IPv6/IPv4 Deployment over Dedicated Data Links," in 2005 5th International Conference on Information Communications & Signal Processing, 2005, pp. 244–248. http://dx.doi.org/10.1109/ICICS.2005.1689043
F. M. Ángel y J. F. C. Domínguez, "Implementación de servicios IPv6 en la Universidad Autónoma de Guerrero, México," Vínculos, vol. 10, no. 2, pp. 393–400, jul.2014.
V. A. Kalusivalingam, "Network Information Service (NIS) Configuration Options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6)," 2004. A. Carrera Buena-o, "Análisis de las Técnicas de Convivencia entre IPV4 e IPV6 y su Implementación en los Servicios: Web, Mail, FTP, Proxy, DNS y DHCP de la Intranet de la ESPOCH," Escuela Superior Politécnica de Chimborazo, 2009.
J. Bound, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6)," 2003.
T. Chown, S. Venaas y C. Strauf, "Dynamic Host Configuration Protocol (DHCP): IPv4 and IPv6 Dual-Stack Issues," 2006.
R. A. Reina Valladares, G. A. Peláez Brioso y L. A. Gurris Aragón, "Metodología de Implementación de IPv6 en La Red de La Universidad de Oriente," Ing. Electrónica, Automática y Común., vol. 29, no. 1, pp. 36–43, jul. 2010.
C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas y T. Ylonen, SPKI certificate theory (No. RFC 2693), 1999. [Online]. Available: https://tools.ietf.org/html/rfc2693
L. P. Aguirre, F. González y D. Mejía, "Aplicaciones de MPLS, transición de IPv4 a IPv6 y mejores prácticas de seguridad para el ISP Telconet," Rev. Politéc., vol. 32, 31 jul de 2013.
S. E. Abasolo Aranda y M. A. Carrera Paz y Mi-o, "Evaluación del modelo de referencia de Internet of things (IoT), mediante la implantación de arquitecturas basadas en plataformas comerciales, open hardware y conectividad IPv6," Univ. Las Fuerzas Armadas ESPE, ene. 2014.
F. Gont, "Security Implications of IPv6 on IPv4 Networks," 2014. [Online]. Available: https://tools.ietf.org/html/rfc7123
T. Ylonen y C. Lonvick. "The secure shell (SSH) connection protocol." 2006. [Online]. Available: https://tools.ietf.org/html/rfc4253
O. E. Motta Barrera and R. Peláez Negro, "De la planeación de TIC a la implementación de IPv6 un escenario deseado para desarrollar el 'Internet de las cosas' en la Universidad de Ibagué Colombia." Red CLARA (Cooperación Latino Americana de Redes Avanzadas, 10-Dec-2011.
F. Baker, X. Li, C. Bao, and K. Yin, "Framework for IPv4/ IPv6 Translation," Internet Engineering Task Force (IETF), 2011. [Online]. Available: https://tools.ietf.org/html/rfc6144.
J. P. Martínez. IPv6 para Todos: Guía de uso y aplicación para diversos entornos, 2009.
G. U. O. Jian. "Model of FTP server based on spring framework in IPv6 and it's implementation [J]." Computer Eng. and Design 19, 2008.
M. Allman y S. Ostermann, "FTP Security Considerations," 1991. [Online]. Available: https://tools.ietf.org/html/rfc2577
W. Zheng, S. Liu, Z. Liu y Q. Fu. "Security transmission of FTP data based on IPsec," In 2009 1st IEEE Symposium on Web Society, pp. 205-208, 2009. http://dx.doi.org/10.1109/SWS.2009.5271783
R . Atkinson y S. Kent, " IP Encapsulating Security Payload (ESP)",1998. [Online]. Available: https://tools.ietf.org/html/rfc2406
S. Kent, "IP Authentication Header'', 2005. [Online]. Available: https://tools.ietf.org/html/rfc4302
C. García Martín, "Análisis de seguridad en redes IPv6," Universidad Carlos III de Madrid, [Tesis de mestría], Dept. Ing. Telem. Univ. Carlos III de Madrid, Getafe, Espa-a, 2012.
T. Mrugalski y D. Hankins, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6) Option for Dual-Stack Lite", 2011.[Online]. Available: https://tools.ietf.org/html/rfc6334
W. Lee, S. S. H. Park y C. Lim, "Server authentication for blocking unapproved WOW access," in 2014 International Conference on Big Data and Smart Computing (BIGCOMP), 2014, pp. 155–159. http://dx.doi.org/10.1109/BIGCOMP.2014.6741427
T. Chown, "IPv6 Campus Transition Experiences," in 2005 Symposium on Applications and the Internet Workshops (SAINT 2005 Workshops), 2005, pp. 46–49. http://dx.doi.org/10.1109/SAINTW.2005.1619975
I. Beijnum, "An FTP Application Layer Gateway (ALG) for IPv6-to-IPv4 Translation.", 2011. [Online]. Available: https://tools.ietf.org/html/rfc6384
J. C. Becerra Cobos, J. R. Simbaqueva Buitrago y A. F. Valenzuela Suárez, "Dise-o e implementación de redes IPv6 en MIPYMES: caso laboratorio de informática," Esc. Colomb. Ing. Julio Garavito, pp. 1–8, 2013.
T. Sanguankotchakorn y M. Somrobru, "Performance Evaluation of IPv6/IPv4 Deployment over Dedicated Data Links," in 2005 5th International Conference on Information Communications & Signal Processing, 2005, pp. 244–248. http://dx.doi.org/10.1109/ICICS.2005.1689043
F. M. Ángel y J. F. C. Domínguez, "Implementación de servicios IPv6 en la Universidad Autónoma de Guerrero, México," Vínculos, vol. 10, no. 2, pp. 393–400, jul.2014.
V. A. Kalusivalingam, "Network Information Service (NIS) Configuration Options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6)," 2004. A. Carrera Buena-o, "Análisis de las Técnicas de Convivencia entre IPV4 e IPV6 y su Implementación en los Servicios: Web, Mail, FTP, Proxy, DNS y DHCP de la Intranet de la ESPOCH," Escuela Superior Politécnica de Chimborazo, 2009.
J. Bound, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6)," 2003.
T. Chown, S. Venaas y C. Strauf, "Dynamic Host Configuration Protocol (DHCP): IPv4 and IPv6 Dual-Stack Issues," 2006.
R. A. Reina Valladares, G. A. Peláez Brioso y L. A. Gurris Aragón, "Metodología de Implementación de IPv6 en La Red de La Universidad de Oriente," Ing. Electrónica, Automática y Común., vol. 29, no. 1, pp. 36–43, jul. 2010.
C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas y T. Ylonen, SPKI certificate theory (No. RFC 2693), 1999. [Online]. Available: https://tools.ietf.org/html/rfc2693
L. P. Aguirre, F. González y D. Mejía, "Aplicaciones de MPLS, transición de IPv4 a IPv6 y mejores prácticas de seguridad para el ISP Telconet," Rev. Politéc., vol. 32, 31 jul de 2013.
S. E. Abasolo Aranda y M. A. Carrera Paz y Mi-o, "Evaluación del modelo de referencia de Internet of things (IoT), mediante la implantación de arquitecturas basadas en plataformas comerciales, open hardware y conectividad IPv6," Univ. Las Fuerzas Armadas ESPE, ene. 2014.
F. Gont, "Security Implications of IPv6 on IPv4 Networks," 2014. [Online]. Available: https://tools.ietf.org/html/rfc7123
T. Ylonen y C. Lonvick. "The secure shell (SSH) connection protocol." 2006. [Online]. Available: https://tools.ietf.org/html/rfc4253
O. E. Motta Barrera and R. Peláez Negro, "De la planeación de TIC a la implementación de IPv6 un escenario deseado para desarrollar el 'Internet de las cosas' en la Universidad de Ibagué Colombia." Red CLARA (Cooperación Latino Americana de Redes Avanzadas, 10-Dec-2011.
F. Baker, X. Li, C. Bao, and K. Yin, "Framework for IPv4/ IPv6 Translation," Internet Engineering Task Force (IETF), 2011. [Online]. Available: https://tools.ietf.org/html/rfc6144.
J. P. Martínez. IPv6 para Todos: Guía de uso y aplicación para diversos entornos, 2009.
G. U. O. Jian. "Model of FTP server based on spring framework in IPv6 and it's implementation [J]." Computer Eng. and Design 19, 2008.
M. Allman y S. Ostermann, "FTP Security Considerations," 1991. [Online]. Available: https://tools.ietf.org/html/rfc2577
W. Zheng, S. Liu, Z. Liu y Q. Fu. "Security transmission of FTP data based on IPsec," In 2009 1st IEEE Symposium on Web Society, pp. 205-208, 2009. http://dx.doi.org/10.1109/SWS.2009.5271783
R . Atkinson y S. Kent, " IP Encapsulating Security Payload (ESP)",1998. [Online]. Available: https://tools.ietf.org/html/rfc2406
S. Kent, "IP Authentication Header'', 2005. [Online]. Available: https://tools.ietf.org/html/rfc4302
C. García Martín, "Análisis de seguridad en redes IPv6," Universidad Carlos III de Madrid, [Tesis de mestría], Dept. Ing. Telem. Univ. Carlos III de Madrid, Getafe, Espa-a, 2012.
T. Mrugalski y D. Hankins, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6) Option for Dual-Stack Lite", 2011.[Online]. Available: https://tools.ietf.org/html/rfc6334
Downloads
Published
2016-06-13
How to Cite
Bareño Gutierrez, R., Navarro Núñez, W., Cárdenas Urrea, S., Sarmiento Osorio, H., & Duarte Acosta, N. (2016). Safety review in implementing services over IPv6. INGE CUC, 12(1), 86–93. https://doi.org/10.17981/ingecuc.12.1.2016.09
Issue
Section
PAPERS
License
Published papers are the exclusive responsibility of their authors and do not necessary reflect the opinions of the editorial committee.
INGE CUC Journal respects the moral rights of its authors, whom must cede the editorial committee the patrimonial rights of the published material. In turn, the authors inform that the current work is unpublished and has not been previously published.
All articles are licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
English
Español (España)
