A survey of the SEcure Neighbor Discovery (SEND) and Multi-Key Cryptographically Generated Addresses (MCGAs)

초록

Most recently computer network products support Internet Protocol version 6 (IPv6) on additionally. In IPv6 network, nodes on the same link use Neighbor Discovery (ND) to discover their default routers on the local link, to determine each other's link-layer addresses, to find routers and to maintain reachability information about the paths to active neighbors. But ND has not secure mechanism for protect itself. One for this reason is that ND protocol implemented with ICMP message types. Previously in IPv4 network, ICMP message was not treated as a secure manner. In IPv6 network, nevertheless, there is a necessity of protection mechanism because ND has many automated function stand in a network operator's shoes in the network. To secure ND, IETF SEND working group organized and standardized SEcure Neighbor Discovery (SEND) protocol that the ND protection mechanism. But it cannot provide ND Proxy in secure manner which is required for mobility. Therefore a new mechanism called a Multi-Key Cryptographically Generated Addresses (MCGAs) was proposed. In this paper, we survey research on SEND protocol and MCGAs.

키워드