Address resolution is an important process in network communications. The primary function of address resolution is to determine the correspondence of a target network address to a physical address. The traditional address resolution process assumes that all the nodes on a network are honest and credible, and these nodes directly broadcast the resolution target address on the network. This process enables malicious nodes to easily mount attacks. We propose a reverse address resolution process with variable length prefix (called Re-AR) that obviates such attacks. According to the revelation principle, a node’s mapping can be viewed as a private type in the address resolution process. In our proposed process, after a node receives an address resolution request broadcast, it unicasts the private type to a positive resolve node that assigns the communication to the correct node according to a predetermined mechanism. Based on simulation results, when the destination address is hidden in the broadcast packets, malicious nodes cannot easily conduct spoofing attacks according to the destination addresses. This phenomenon effectively prevents spoofing and significantly reduces the pollution rate of address cache tables.
목차
Abstract 1. Introduction 2. Address Resolution and the Wallet Problem 3. Reverse Address Resolution (Re-AR) with Variable Length Prefix 3.1. Re-AR Process with Variable Length Prefix 3.2. Security Analysis 4. Simulation Experiments 5. Conclusions Acknowledgements References
보안공학연구지원센터(IJFGCN) [Science & Engineering Research Support Center, Republic of Korea(IJFGCN)]
설립연도
2006
분야
공학>컴퓨터학
소개
1. 보안공학에 대한 각종 조사 및 연구
2. 보안공학에 대한 응용기술 연구 및 발표
3. 보안공학에 관한 각종 학술 발표회 및 전시회 개최
4. 보안공학 기술의 상호 협조 및 정보교환
5. 보안공학에 관한 표준화 사업 및 규격의 제정
6. 보안공학에 관한 산학연 협동의 증진
7. 국제적 학술 교류 및 기술 협력
8. 보안공학에 관한 논문지 발간
9. 기타 본 회 목적 달성에 필요한 사업
간행물
간행물명
International Journal of Future Generation Communication and Networking
간기
격월간
pISSN
2233-7857
수록기간
2008~2016
십진분류
KDC 505DDC 605
이 권호 내 다른 논문 / International Journal of Future Generation Communication and Networking Vol.8 No.4