Trace6: A Practical Threatener Traceback Model in IPv6 Network

The increasing severity of Internet threats and the rapid digitization process worldwide have made network security more important than ever. Proactive defense technologies, such as threat traceback, have become essential for protection. However, current threatener traceback systems are not feasible due to lack of sufficient information, low reliability of traceback results, and an inability to meet both universality and lightweight. To address these issues, a practical threatener traceback model in IPv6 networks (Trace6) has been developed using the unique features of the huge IPv6 address space and extended address field. Trace6 proposes user information generated addresses that are rich in user information to determine the mapping relationship between natural persons and addresses. It introduces and combines two technologies, user authentication and address verification, to strengthen the determined mapping relationship. Furthermore, Trace6 enhances the address lease after Portal authentication and distinguishes the address status to ensure that it is both universal and lightweight. The experimental results from the prototype system’s tests indicate that Trace6 can further ensure reliability, universality, and lightweight while maintaining effectiveness.