Research On Active Measurement Technology For IPv6 Active Addresses And Aliased Regions

Nowadays,IPv6 Internet is in thorough development,and active address data could support security research.Internet-wide active scanning technology is an emerging network measurement method,but finding ways to search IPv6 active addresses and deal with large-scale alias based on the method is a valuable research topic.This paper reviews relative work and proposes an active measurement technique 6Tree.It analyzes known active addresses as seeds to learn their features and offers search directions for scanners.IPv6 addresses are comprehended as highdimensional vectors and it performs a naive divisive hierarchical clustering(DHC)on seeds to generate a data structure,named a space tree,that characterizes value variabilities in different dimensions.Analytical results show that the DHC has a linear time complexity to finish data training at high speed for supporting a timely application.The space tree structure could support adjusting proper directions based on real-time results and perceiving the aliased phenomenon early to trigger an interruption for the aliased region measurement.Through the interruption mechanism,it could measure the distribution of aliased regions,also avoid scanning on these regions in the successive search.Moreover,this paper design Iris to visualize measurement results and show the distribution of active addresses and aliased regions to offer a novel perspective on the IPv6 deployment situation.In experiments,the performance of 6Tree is evaluated,and measurements are also performed on IPv6 Internet.Results proof the linear time complexity of the DHC and the capability of 6Tree to discover active addresses.In context variations,including uneven seed sampling and workload division,6Tree shows better robustness for maintaining address discovery performance than 6Gen.Except for aliased addresses,6Tree discovered approximately 4.69 M and 6.54 M addresses based on1.07 M and 1.96 M seeds,respectively,and the alias measurement results are also accurate according to aliased prefixes collected from a nascent research.