In IPv6 based MANETs, the neighbor discovery enables nodes to self-configure and communicate with neighbor nodes through autoconfiguration. The Stateless address autoconfiguration (SLAAC) has proven to face several security issues. Even though the Secure Neighbor Discovery (SeND) uses Cryptographically Generated Addresses (CGA) to address these issues, it creates other concerns such as need for CA to authenticate hosts, exposure to CPU exhaustion attacks and high computational intensity. These issues are major concern for MANETs as it possesses limited bandwidth and processing power. The paper proposes empirically strong Light Weight Cryptographic Address Generation (LW-CGA) using entropy gathered from system states. Even the system users cannot monitor these system states; hence LW-CGA provides high security with minimal computational complexity and proves to be more suitable for MANETs. The LW-CGA and SeND are implemented and tested to study the performances. The evaluation shows that LW-CGA with good runtime throughput takes minimal address generation latency.
翻译:在基于IPv6的MANET中,邻居发现机制使节点能够通过自动配置与邻近节点通信。基于状态自动配置(SLAAC)已被证明存在多个安全问题。尽管通过使用加密生成地址(CGA)的安全邻居发现(SeND)解决了这些问题,但也带来了其他问题,例如需要CA来认证主机,容易受到CPU耗尽攻击的影响以及高计算强度。这些问题对于MANET来说是一个主要问题,因为它具有有限的带宽和处理能力。本文提出了基于从系统状态中收集的熵构建的轻量级加密地址生成(LW-CGA)方法,该方法在计算复杂度最小的情况下提供高安全性。即使系统用户无法监控这些系统状态,LW-CGA仍提供了高安全性,并且在MANET中更加适用。我们实现并测试了LW-CGA和SeND,研究了它们的性能。评估结果显示,LW-CGA具有良好的运行时间吞吐量,生成地址的延迟非常小。