Ronan, John and Ford, Matthew and Stevens, Jonathan (2006) Initial results from an IPv6 Darknet. In: ICISP 2006, 26-29 August 2006, Cap Esterel, Côte d’Azur, France.
Preview |
PDF
PID255945.pdf Download (135kB) | Preview |
Abstract
A darknet is an advertised and routed portion of Internet address space that contains no advertised services. Any traffic observed on a darknet is therefore illegitimate and darknets are useful tools for observing the level of background ‘noise’ on a larger network. Darknets have been used in existing IPv4 networks to help to identify malicious traffic, malware trends, or the consequences of misconfiguration. We have created what may be the world’s first IPv6 darknet to help us observe the ‘noise’ present on the IPv6 Internet and to see how this differs from the IPv4 Internet. Initial results suggest that the level of undirected malicious software active on the IPv6 Internet is currently minimal and there is no apparent undirected port-scanning activity. We suspect this is partially a (predicted) consequence of the larger IPv6 address space and also an indication of the immaturity of the IPv6 Internet at the present time.
| Item Type: | Conference or Workshop Item (Paper) |
|---|---|
| Departments or Groups: | Walton Institute for Information and Communications Systems Science > Communications Infrastructure Management Walton Institute for Information and Communications Systems Science |
| Divisions: | School of Science > Department of Computing, Maths and Physics |
| Depositing User: | John Ronan |
| Date Deposited: | 17 Nov 2007 13:06 |
| Last Modified: | 22 Aug 2016 10:25 |
| URI: | https://repository.wit.ie/id/eprint/419 |
Available Versions of this Item
- Initial results from an IPv6 Darknet. (deposited 17 Nov 2007 13:06) [Currently Displayed]
Actions (login required)
 |
View Item |
