Defensive Resource Allocations with Security Chokepoints in IPv6 Networks - Archive ouverte HAL Access content directly
Conference Papers Year : 2015

Defensive Resource Allocations with Security Chokepoints in IPv6 Networks

(1) , (2) , (3) , (1)
1
2
3
Assane Gueye
  • Function : Author
  • PersonId : 1029898
Richard Harang
  • Function : Author
  • PersonId : 1029900
Richard J. La
  • Function : Author
  • PersonId : 1029901

Abstract

Securely configured Internet Protocol version 6 networks can be made resistant to network scanning, forcing attackers to propagate following existing benign communication paths. We exploit this attacker limitation in a defensive approach in which heightened security measures are deployed onto a select group of chokepoint hosts to enhance detection or deter penetration. Chokepoints are chosen such that, together, they connect small isolated clusters of the communication graph. Hence, attackers attempting to propagate are limited to a small set of targets or have to penetrate one or more chokepoints. Optimal placement of chokepoints requires solving an NP-hard problem and, hence, we approximate optimal solutions via a suite of heuristics. We test our algorithms on data from a large operational network and discover that heightened security measures are only needed on 0.65 % of the nodes to restrict unimpeded attacker propagation to no more than 15 % of the network.
Fichier principal
Vignette du fichier
340025_1_En_19_Chapter.pdf (295.39 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01745826 , version 1 (28-03-2018)

Licence

Attribution - CC BY 4.0

Identifiers

Cite

Assane Gueye, Peter Mell, Richard Harang, Richard J. La. Defensive Resource Allocations with Security Chokepoints in IPv6 Networks. 29th IFIP Annual Conference on Data and Applications Security and Privacy (DBSEC), Jul 2015, Fairfax, VA, United States. pp.261-276, ⟨10.1007/978-3-319-20810-7_19⟩. ⟨hal-01745826⟩
211 View
87 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More