Towards A User-Level Understanding of IPv6 Behavior
Frank Li, David Mandell Freeman
Abstract
IP address classification and clustering are important tools for security practitioners in understanding attacks and employing proactive defenses. Over the past decade, network providers have begun transitioning from IPv4 to the more flexible IPv6, and a third of users now access online services over IPv6. However, there is no reason to believe that the properties of IPv4 addresses used for security applications should carry over to IPv6, and to date there has not yet been a large-scale study comparing the two protocols at a user (as opposed to a client or address) level.
Topics & Concepts
IPv6Computer scienceIPv4Computer securityCluster analysisWorld Wide WebInternet privacyThe InternetMachine learningNetwork Security and Intrusion DetectionIPv6, Mobility, Handover, Networks, SecurityInternet Traffic Analysis and Secure E-voting