Presentation 2017-10-13
Testbed for Security Analysis of the DNS64 IPv6 Transition Technology in Virtual Environment
Gabor Lencse, Youki Kadobayashi,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) In this paper, we demonstrate the feasibility of building a virtual network with several virtual Linux hosts for testing the security issues of the DNS64 IPv6 transition technology. This virtual testbed has so low hardware requirements that it can be operated under Windows 7 on an aging notebook having only 4GB of RAM and 2 CPU cores. We demonstrate the viability of the approach by testing different DNS64 implementations for the susceptibility to Transaction ID prediction attacks. The examined DNS64 implementations are BIND, TOTD, mtd64-ng and PowerDNS. A simple visual method is used for Transaction ID predictability testing. Besides the demonstration, further application possibilities of the testbed are also proposed.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) DNS64 / IPv6 transition technologies / NAT64 / Security / Testbed / Virtualization
Paper # IA2017-22
Date of Issue 2017-10-06 (IA)

Conference Information
Committee IA
Conference Date 2017/10/13(1days)
Place (in Japanese) (See Japanese page)
Place (in English) Fukutake Hall, The University of Tokyo
Topics (in Japanese) (See Japanese page)
Topics (in English) Network R&D Testbed Operation and Utilization, etc. (cosponsored by ADVNET)
Chair Katsuyoshi Iida(Hokkaido Univ.)
Vice Chair Rei Atarashi(IIJ) / Hiroyuki Osaki(Kwansei Gakuin Univ.) / Tomoki Yoshihisa(Osaka Univ.)
Secretary Rei Atarashi(Tokyo Metropolitan Univ.) / Hiroyuki Osaki(TOYOTA-IT) / Tomoki Yoshihisa
Assistant Kenji Ohira(Tokushima Univ.) / Ryohei Banno(NTT) / Toshiki Watanabe(NEC)

Paper Information
Registration To Technical Committee on Internet Architecture
Language ENG
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Testbed for Security Analysis of the DNS64 IPv6 Transition Technology in Virtual Environment
Sub Title (in English)
Keyword(1) DNS64
Keyword(2) IPv6 transition technologies
Keyword(3) NAT64
Keyword(4) Security
Keyword(5) Testbed
Keyword(6) Virtualization
1st Author's Name Gabor Lencse
1st Author's Affiliation Nara Institute of Science and Technology(NAIST)
2nd Author's Name Youki Kadobayashi
2nd Author's Affiliation Nara Institute of Science and Technology(NAIST)
Date 2017-10-13
Paper # IA2017-22
Volume (vol) vol.117
Number (no) IA-239
Page pp.pp.19-24(IA),
#Pages 6
Date of Issue 2017-10-06 (IA)