Secure address configuration in IPv6 networks

Su Kit Tang, Kai Hau Yeung, Kin Yeung Wong

Research output: Contribution to journalArticlepeer-review

1 Citation (Scopus)


To secure the operations of address auto-configuration protocols in IPv6 networks, a solution called Secure Address Configuration for IPv6 (SAC6) is proposed in this paper. Unlike the previous solutions that mainly use the cryptographic approach, SAC6 eliminates the threats to configuration protocols for the network nodes by acting like a Neighbor Discovery Protocol agent. The major merit of SAC6 is that its operations are transparent to the network and do not require the modification of existing protocols. Therefore, it can be seamlessly deployed in existing IPv6 networks. To demonstrate the viability of SAC6, we implemented SAC6 as a kernel module in a Linux bridge. In our experiments, SAC6 have successfully blocked various kinds of spoofing configuration protocol messages and prevent the network nodes from being attacked during the address configuration.

Original languageEnglish
Pages (from-to)551-558
Number of pages8
JournalJournal of Internet Technology
Issue number4
Publication statusPublished - 2012


  • Address configuration
  • IPv6
  • Network infrastructure


Dive into the research topics of 'Secure address configuration in IPv6 networks'. Together they form a unique fingerprint.

Cite this