Crosby-Signed Thesis - Alliance Digital Repository

More documents

Recommendations

Info

IMPACT OF IPV6 TRANSITION MECHANISMS ON THE NETWORK FORENSIC 219 This RFC 3089 IEFT document discusses the SOCKS64 IPv6/IPv4 transition mechanism. This method involves inserting a socket between the application and the outbound NIC to allow both IPv6 and IPv4 hosts to communicate with an application through a translation API. Lan, T. H..Lin, A. C..Lin, I. L., & Wu, T. (2005). Establishment of the standard operating procedure (SOP) for gathering digital evidence. Paper presented at the First International Workshop on Systematic Approaches to <strong>Digital</strong> Forensic Engineering (SADFE’05). Retrieved from http://doi.ieeecomputersociety.org/10.1109/SADFE.2005.12 doi:10.1109/SADFE.2005.12 This IEEE conference paper addresses the low credibility of digital evidence in ad-hoc digital investigations. The qualitative methodology used is weakly supported by references to evidence handling procedures used by the FBI and Chinese investigators. They also base their proposed model on Lin (2000) "Study of Evidence Act on <strong>Digital</strong> Data", Chang (2000) "Study of Computer crime Evidence", and Casey (2000) "Handbook of Computer Crime: Forensic Science, Computer and the Internet". The proposed model is detailed and appears to be a model that could work in practice or further developed by other researchers. The paper seems to be more like a presentation of the authors views and beliefs that may be based more on experience than on their research efforts. Lee, S..Shin, M.-K..Kim, Y.-J..Nordmark, E., & Durand, A. (2002). Dual stack hosts using "bump-in-the-API" (BIA). RFC 3338: Internet Engineering Task Force (IETF). This RFC 3338 IETF document discusses the bump in the API IPv6 transition mechanism. This mechanism inserts functions between the TCP API and the network protocol stack to translate IPv4 API calls from applications into IPv6 API calls. The
IMPACT OF IPV6 TRANSITION MECHANISMS ON THE NETWORK FORENSIC 220 components in the method include the function mapper, name resolver, and address mapper. Lee, Y..Shin, S..Choi, S., & Son, H. g. (2007). IPv6 anomaly traffic monitoring with IPFIX. Paper presented at the Second International Conference on Internet Monitoring and Protection (ICIMP 2007). Retrieved from http://doi.ieeecomputersociety.org/10.1109/ICIMP.2007.23 This IEEE conference paper addresses the lack of methods to track IPv6 flow data to identify anomalous traffic flows. The paper provides an analysis of the issues surrounding anomaly traffic in IPv6 networks and proposes a new solution to track and analyze the traffic. A qualitative methodology is used that presents data in a simulation format. Research is based on IPv6 threats presented by: Kamra, The Effect of DNS Delays on Worm Propagation in an IPv6 Internet; Convery, IPv6 and IPv4 Threat Comparison and Best-Practice Evaluation; Warfield, Security Implications of IPv6; Lucena, Covert Channels in IPv6; and Graf, Messaging over IPv6 Destination Options. Future research possibilities include expanding the model to address additional anomaly traffic and providing support for packet sampling. While, analyzing network flows is beneficial to identifying some attacks, the lack of a method to monitor packets at the detail level make the research less valuable. Leng, X..Bi, J..Zhang, M., & Wu, J. (2007). Connecting IPvX networks over IPvY with a P2P method. Journal of Network System Management, 15, 383-399. doi: 10.1007/s10922-007 9071-z This Journal article addresses the problem of IPv6 relay bottlenecks when acting on local traffic. It is a qualitative study using description and a quantitative study using lab
Page 1 and 2:
Regis University College for Profes
Page 3 and 4:
IMPACT OF IPV6 TRANSITION MECHANISM
Page 5 and 6:
Page 7 and 8:
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Page 85 and 86:
Page 87 and 88:
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
Page 97 and 98:
Page 99 and 100:
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
Page 115 and 116:
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
Page 127 and 128:
Page 129 and 130:
Page 131 and 132:
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
Page 139 and 140:
Page 141 and 142:
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182: IMPACT OF IPV6 TRANSITION MECHANISM
Page 231: IMPACT OF IPV6 TRANSITION MECHANISM
show all

Crosby-Signed Thesis - Alliance Digital Repository

Create successful ePaper yourself

Delete template?

Save as template?