Defeating Internet attacks and Spam using "disposable" Mobile IPv6 home addresses

TL;DR

This paper introduces a novel approach using multiple disposable Mobile IPv6 addresses for each user to effectively prevent various attacks and spam, enhancing security and resilience in next-generation wireless Internet.

Contribution

It proposes a new model of using disposable addresses per correspondent, enabling targeted blocking and improved defense against DoS attacks and spam.

Findings

Disposable addresses effectively block attack traffic.

The model prevents attackers from compromising the entire system.

It offers a practical solution for current security challenges.

Abstract

We propose a model of operation for next generation wireless Internet, in which a mobile host has hundreds of "disposable" Mobile IPv6 home addresses. Each correspondent is distributed a different disposable home address. If attacked on a given home address, the mobile user can block packets to that address and become unreachable to the attacker. Blocking one address does not affect other addresses. Other correspondents can still reach the mobile host. A new home address can also be requested via e-mail, instant messaging, or directly from the target host using a protocol that we develop. This model is especially useful against battery exhausting Denial-of-Service (DoS) attacks and CPU exhausting distributed DoS attacks, since it seems to be the only viable solution, currently. We show however that this model can also be used to defeat other attacks and also to stop spam.