Design of Mobile IPv6 IDS for Mitigating DoS Attacks on the Correspondent Node, Home Agent, and Mobile Node

Authors

  • Supriyanto Praptodiyono Universitas Pembangunan Nasional Veteran Jakarta (UPNVJ), Department of Informatics
  • Rido Zulfahmi Universitas Pembangunan Nasional Veteran Jakarta (UPNVJ), Department of Information Systems
  • Henki Bayu Seta Universitas Pembangunan Nasional Veteran Jakarta (UPNVJ), Department of Informatics
  • Novi Trisman Hady Universitas Pembangunan Nasional Veteran Jakarta (UPNVJ), Department of Data Science
  • Moh. Jauhari Universitas Sultan Ageng Tirtayasa (UNTIRTA), Department of Electrical Engineering
  • Rian Fahrizal Universitas Sultan Ageng Tirtayasa (UNTIRTA), Department of Electrical Engineering
  • Teguh Firmansyah Universitas Sultan Ageng Tirtayasa (UNTIRTA), Department of Electrical Engineering

Abstract

This study investigates the implementation of an Intrusion Detection System (IDS) in a Mobile IPv6 network to mitigate Denial of Service (DoS) attacks targeting the Correspondent Node (CN), Home Agent (HA), and Mobile Node (MN). The IDS was designed to detect abnormal network traffic by identifying the time and IP address of the attacker, providing real-time alerts. To enhance security, the IDS was integrated with a firewall capable of blocking detected DoS attacks. Performance evaluation was conducted under multiple scenarios, including normal operation, under attack, and under attack with the IDS-firewall system active. Testing on the CN demonstrated a reduction in throughput loss to 20.30% and 11.65%, with CPU usage decreasing by 59.48% and an average attacker block time of 0.9 seconds. On the HA, throughput loss was reduced to 16.05% and 18.87%, CPU usage decreased by 50.52%, and the block time was 1.2 seconds. Testing on the MN showed a reduction in throughput degradation to 45.98% and 56.09%, with CPU usage decreasing by 17.86%. The results indicate that an IDS integrated with a firewall effectively mitigates DoS attacks in Mobile IPv6 networks, improving both network performance and system resilience. This approach demonstrates a practical solution for maintaining reliable communication and protecting critical network nodes against DoS threats.

Additional Files

Published

2026-10-26

Issue

Section

Security, Safety, Military