Novel Duplicate Address Detection with Hash Function

Area of Science:

• Computer Science
• Network Security
• Cybersecurity

Background:

• Duplicate Address Detection (DAD) is crucial for Address Resolution Protocol (ARP) and Neighbor Discovery Protocol (NDP).
• Traditional DAD broadcasts target IP addresses, making them vulnerable to spoofing and denial-of-service (DoS) attacks by malicious nodes.
• Attacks can prevent legitimate nodes from configuring their IP addresses.

Purpose of the Study:

• To propose a novel hash-based method (DAD-h) to enhance the security and success rate of DAD.
• To mitigate the risk of DoS attacks during IP address configuration.
• To provide a lightweight and efficient security solution for DAD.

Main Methods:

• A hash method is introduced to obscure the target IP address during DAD.
• Nodes compare their IP address hash with the 'Hash_64' field in Neighbor Solicitation messages.
• Successful hash matching confirms address uniqueness and allows configuration.

Main Results:

• Simulations demonstrate a significantly higher success rate for address configuration using DAD-h under attack conditions compared to traditional DAD.
• DAD-h effectively prevents malicious nodes from launching destination-based attacks.
• The proposed method does not require third-party devices or substantial computational resources.

Conclusions:

• DAD-h offers a robust and lightweight solution for secure IP address configuration.
• The hash-based approach enhances network resilience against DoS attacks targeting DAD.
• DAD-h provides an effective security resolution without compromising performance or requiring extensive infrastructure.