基于种子地址的IPv6地址探测技术综述

doi:10.11959/j.issn.1000-0801.2019296

Abstract

Abstract:

Nowadays,the state-of-the-art technologies can spend a very short time to scan the whole IPv4 space,but these methods cannot be applied to the huge IPv6 space easily.Therefore,many researchers propose different heuristic algorithms for the sake of IPv6 scanning.The common way of these algorithms is to input collected IPv6 seed addresses and output new most likely active IPv6 addresses as candidates for later scanning.These methods greatly reduce the scanning range of the active address area.These technologies based on seed addresses were classified,analyzed and summarized,and detailed analysis of the advantages and disadvantages of each method was given.And the several challenges faced by the methods were discussed.73M seed addresses were collected in total from two sources,including published IPv6 datasets in papers and Beijing Node of China Education and Research Network.Through the proposed experiments,time performance and hit rate of four IPv6 address scanning technologies based on seed addresses was compared.Finally,the own thoughts on this field and some future research directions were proposed.

Key words: IPv6, seed address, network scanning, generation algorithm

CLC Number:

TP393

Guo LI,Lin HE,Guanglei SONG,Zhiliang WANG,Jiahai YANG,Zimu LI. Survey on IPv6 address scanning technology based on seed sources[J]. Telecommunications Science, 2019, 35(12): 24-37.

Figures/Tables 10

References 26

[1]	DURUMERIC Z , BAILEY M , HALDERMAN J . An internet-wide view of internet-wide scanning[C]// USENIX Conference on Security,Aug 20-22,2014,San Diego,USA.[S.l.:s.n]. 2014: 65-78.
[2]	DURUMERIC Z , WUSTROW E , HALDERMAN J A . ZMap:fast internet-wide scanning and its security applications[C]// USENIX Conference on Security,Aug 14-16,2013,Washington D.C.,USA.[S.l.:s.n]. 2013: 605-620.
[3]	SAILAN M , HASSAN R , PATEL A . A comparative review of IPv4 and IPv6 for research test bed[C]// International Conference on Electrical Engineering and Informatics,Aug 5-7,2009,Selangor,Malaysia. Piscataway:IEEE Press, 2009: 427-433.
[4]	IETF. Network reconnaissance in IPv6 networks:RFC7707[S]. 2016.
[5]	OTTOW C , VLIET F , BOER P . The impact of IPv6 on penetration testing[C]// Information and Communication Technologies,EUNICE 2012. Heidelberg:Springer, 2012: 88-89.
[6]	STROWES S D . Bootstrapping active IPv6 measurement with IPv4 and public DNS[J]. Computing Research Repository, 2017.
[7]	FIEBIG T , BORGOLTE K , HAO S ,et al. Something from nothing (there):collecting global IPv6 datasets from DNS[C]// International Conference on Passive and Active Network Measurement. Heidelberg:Springer, 2017.
[8]	FIEBIG T , BORGOLTE K , HAO S ,et al. In rDNS we trust:revisiting a common data-source’s reliability[C]// Passive and Active Measurement Conference,March 26,2018,Berlin,Germany. Heidelberg:Springer, 2018.
[9]	BORGOLTE K , HAO S , FIEBIG T ,et al. Enumerating active IPv6 hosts for large-scale security scans via DNSSEC-signed reverse zones[C]// 2018 IEEE Symposium on Security and Privacy (SP),May 20-24,2018,Francisco,CA,USA. Washington:IEEE Computer Society, 2018: 770-784.
[10]	ULLRICH J , KIESEBERG P , KROMBHOLZ K ,et al. On reconnaissance with IPv6:a pattern-based scanning approach[C]// 2015 10th International Conference on Availability,Reliability and Security (ARES), 2015.
[11]	FOREMSKI P , PLONKA D , BERGER A . Entropy/IP:uncovering structure in IPv6 addresses[C]// ACM Internet Measurement Conference,Nov 14-16,2016,Santa Monica,USA. New York:ACM Press, 2016.
[12]	MURDOCK A , LI F , BRAMSEN P ,et al. Target generation for internet-wide IPv6 scanning[C]// Internet Measurement Conference,Nov 1-3,2017,London,UK. New York:ACM Press, 2017.
[13]	GASSER O , SCHEITLE Q , FOREMSKI P ,et al. Clusters in the expanse:understanding and unbiasing IPv6 hitlists[C]// Internet Measurement Conference (IMC),Oct 31-Nov 2,2018,Boston,USA.[S.l.:s.n]. 2018: 364-378.
[14]	LIU Z Z , XIONG Y Q , XIN L ,et al. 6Tree:efficient dynamic discovery of active addresses in the IPv6 address space[J]. Computer Networks, 2019.
[15]	IETF. Basic requirements for IPv6 customer edge routers:RFC 7084[EB/OL]. 2013.
[16]	HUZ G , BAUER S , CLAFFY KC ,et al. Experience in using MTurk for network measurement[C]// SIGCOMM C2B(I)D Workshop,Aug 17,2015,London,UK. New York:ACM Press, 2015.
[17]	QASIM L , MATTHEW L , MACIEJ K ,et al. Using crowd sourcing market places for network measurements:the case of spoofer[C]// Network Traffic Measurement and Analysis Conference,June 26-29,2018,Vienna,Austria. Piscataway:IEEE Press, 2018.
[18]	VARVELLO M , BLACKBURN J , NAYLOR D ,et al. EYEORG:a platform for crowdsourcing Web quality of experience measurements[C]// ACM Conference on Emerging Networking Experiments and Technologies,Nov 30-Dec 3,2016,Philadelphia,USA. New York:ACM Press, 2016.
[19]	CHOWN T . IPv6 implications for network scanning internet requests for comments:RFC5157[S]. 2008.
[20]	BARRERA D , OORSCHOT P . Security visualization tools and IPv6 addresses[C]// International Workshop on Visualization for Cyber Security,Oct 11,2009,Atlantic City,USA. Piscataway:IEEE Press, 2009: 21-26.
[21]	GASSER O . Evaluating network security using internet-wide measurements[D]. München:Technische Universit?t München, 2019.
[22]	IETF. IPv6 Addressing of IPv4/IPv6 translators:RFC6052[S]. 2010.
[23]	IETF. Teredo:tunneling IPv6 over UDP through network address translations (NAT):RFC4380[S]. 2006.
[24]	IETF. IP version 6 addressing architecture:RFC4291[S]. 2006.
[25]	IETF. A recommendation for IPv6 address text representation:RFC5952[S]. 2010.
[26]	刘觅, 杨海川, 李振华 . 运营商构建电信大数据生态之道[J]. 电信科学, 2018,34(1): 109-119.
	LIU M , YANG H C , LI Z H . Way for operators to build the tele communication big data ecology[J]. Telecommunications Science, 2018,34(1): 109-119.

Metrics

Recommended 0

No Suggested Reading articles found!

IPv6编址类型	占比
全球单播地址	99.98%
站点本地地址	0.01%
多播地址	0.01%
其他地址	0

IID分配类型	描述	示例
Random^[4]	随机设定取值	2402:f000:6:8601:ca70:72df:75b3:c5d8
Low-Byte^[4]	连续零值和低位零值	2001:da8:a0:f015::1
IPv4嵌入^[22]	IPv4地址嵌入	2001:db8:122:344::192.0.2.33
Teredo隧道^[22]	过渡采用的隧道技术	2001:0000:4136:e378:8000:63bf:3fff:fdd2
EUI-64嵌入^[24]	MAC地址嵌入	2402:f000:6:8601:221:2FFF:FEB5:6E10
Modified EUI-64^[24]	嵌入组织唯一标识符	2001:db8::1234:56ff:fe00:ffff
Wordy^[4]	嵌入英语词汇	2001::cafe:face
Ports^[4,25]	嵌入服务端口	2001:db8::21

对比项目	Pattern-based^[10]	Entropy/IP^[11]	6Gen^[12]	改进的Entropy/IP^[13]	6Tree^[14]
年份	2015年	2016年	2017年	2018年	2019年
处理较大地址耗时	最快	中等	最慢	中等	快
关键技术	递归	贝叶斯网络	聚类	贝叶斯网络	分裂树
是否考虑别名	否	否	是	是	是
可视化能力	较弱	较强	较弱	较强	较强
扫描是否有反馈	无	无	无	无	有
是否公开数据集	否	否	否	是	否
是否开源代码	否	否	否	是	否
论文中发现地址量级	10³	10⁶	10⁶	10⁸	10⁸

Survey on IPv6 address scanning technology based on seed sources

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 10

References 26

Related Articles 15

Metrics

Recommended 0

[1]	Jianguo LIU, Hao QU, Hongming HUANG, Zhidan ZHU. Research on IPv6+ intelligent backbone network technology [J]. Telecommunications Science, 2023, 39(5): 155-166.
[2]	Xu ZHOU, Sheng JIANG, Jie ZHANG, Bo LEI, Xiuli ZHENG, Taixin LI. Ubiquitous IP protocol system [J]. Telecommunications Science, 2021, 37(10): 47-54.
[3]	Chengli ZHANG, Xiaorong HE, Weifang SONG. Privatize modification of broadband dual IP stack on cloud platform [J]. Telecommunications Science, 2021, 37(10): 162-170.
[4]	Hui TIAN,Zheng WEI. IPv6+ innovation of the NGI [J]. Telecommunications Science, 2020, 36(8): 3-10.
[5]	Zhenbin LI,Feng ZHAO. Standard system of IPv6+ technologies [J]. Telecommunications Science, 2020, 36(8): 11-21.
[6]	Lin HE,Peng KUANG,Shicheng WANG,Ying LIU,Xing LI,Shuping PENG. Application-aware IPv6 networking [J]. Telecommunications Science, 2020, 36(8): 36-42.
[7]	Jiang ZHOU,Hewu LI. A general way to assign IPv6 trusted address under portal authentication [J]. Telecommunications Science, 2019, 35(12): 8-14.
[8]	Wei WANG. IPv6 based SD-WAN deployment [J]. Telecommunications Science, 2019, 35(12): 38-42.
[9]	Xin ZHANG. Research and application of the IBN for the next generation internet [J]. Telecommunications Science, 2019, 35(12): 43-48.
[10]	Yangchun LI,Weiwei FENG. IPv6 communication capability index and its application in end-to-end carrier network [J]. Telecommunications Science, 2016, 32(5): 179-185.
[11]	Ansheng YIN,Shunyi ZHANG. Design and implementation of routing strategy based on terminal trust [J]. Telecommunications Science, 2016, 32(4): 1-8.
[12]	Peiliang Sun,Xiang Zhou,Zhonghua Chen. Design of Routing Home Gateway in Large-Scale Commercial Engineering Deployment of IPv6 [J]. Telecommunications Science, 2015, 31(1): 159-163.
[13]	Sun Peiliang,Zhou Xiang and Chen Zhonghua. Design of Routing Home Gateway in Large-Scale Commercial Engineering Deployment of IPv6 [J]. Telecommunications Science, 2015, 31(1): 2015043-.
[14]	Shi Li. Double-Network-Layer, a New Solution for IPng [J]. Telecommunications Science, 2014, 30(8): 136-148.
[15]	Qiong Sun,Chongfeng Xie,Huiling Zhao,Xushan Lu,Shucheng Liu. Design and Realization of SDN-Based IPv6 Transition Technology [J]. Telecommunications Science, 2014, 30(4): 15-21.