Back to Search
Start Over
Addressless: A new internet server model to prevent network scanning
- Source :
- PLoS ONE, Vol 16, Iss 2, p e0246293 (2021), PLoS ONE
- Publication Year :
- 2021
- Publisher :
- Public Library of Science (PLoS), 2021.
-
Abstract
- Eliminating unnecessary exposure is a principle of server security. The huge IPv6 address space enhances security by making scanning infeasible, however, with recent advances of IPv6 scanning technologies, network scanning is again threatening server security. In this paper, we propose a new model named addressless server, which separates the server into an entrance module and a main service module, and assigns an IPv6 prefix instead of an IPv6 address to the main service module. The entrance module generates a legitimate IPv6 address under this prefix by encrypting the client address, so that the client can access the main server on a destination address that is different in each connection. In this way, the model provides isolation to the main server, prevents network scanning, and minimizes exposure. Moreover it provides a novel framework that supports flexible load balancing, high-availability, and other desirable features. The model is simple and does not require any modification to the client or the network. We implement a prototype and experiments show that our model can prevent the main server from being scanned at a slight performance cost.
- Subjects :
- FOS: Computer and information sciences
Computer and Information Sciences
Computer science
Entropy
Science
Encryption
Information Storage and Retrieval
Cryptography
Research and Analysis Methods
Computer Science - Networking and Internet Architecture
Machine Learning
Machine Learning Algorithms
Artificial Intelligence
Prototypes
Humans
Isolation (database systems)
Computer Networks
Computer Security
Networking and Internet Architecture (cs.NI)
Internet
Multidisciplinary
IPv6 address
Computers
business.industry
Physics
Applied Mathematics
Simulation and Modeling
Load balancing (computing)
IPv6
Technology Development
Physical Sciences
Thermodynamics
Engineering and Technology
Medicine
The Internet
business
Mathematics
Network Analysis
Algorithms
Software
Research Article
Computer network
Subjects
Details
- Language :
- English
- ISSN :
- 19326203
- Volume :
- 16
- Issue :
- 2
- Database :
- OpenAIRE
- Journal :
- PLoS ONE
- Accession number :
- edsair.doi.dedup.....7fd50d9cc054d6f2240340bf6844bf1c