Routing Attack in the ND and SEND Mixed Environment

With the deployment of IPv6 and the rising threat of ND security issues, SEND is desiderated to be deployed in subnets. SEND binds the node's identifier to IP address and adds the digital signature to its message to resist hijacking and man-in-the-middle attacks. However, during the stage of transition, the coexistence of ND and SEND may cause security issues. This paper analyzes the specific security vulnerabilities in the mixed environment of SEND and ND, and proposes a method of routing attack in the coexistence environment, which takes advantages of the source address selection algorithm to induce the host to send packets through the unsecure addresses and routers, in order to bypass the protection of router advertisement and the authentication of router identity by SEND option. The research of this paper will help the wide deployment of SEND mechanism and provide protection for the IPv6 subnets.