Pluggable Asset Detection Engine for IPv6 Network Discovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In modern networks employing IPv6 addressing, traditional brute force scanning methods are impractical due to the vast address space, making it difficult to efficiently map devices and monitor security activities, as scanning the entire IPv6 space would take an impractically long time.
Innovation Solution
The implementation of an asset management system that uses a pluggable asset detection engine with various discovery sensors to identify and manage address information of computing devices within a network, including passive and active sensors, event-based sensors, and indirect sensors, allowing for targeted and efficient discovery of active IPv6 addresses and additional attributes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If brute force scanning is used to discover IPv6 devices, then complete network device identification can be achieved, but the scanning time becomes impractically long
Solution Approach 1:
The patent segments the IPv6 address space into smaller subnets and uses router advertisements to identify active subnets. Instead of scanning all 2^128 addresses, the system divides the network into manageable segments (subnets) and only scans addresses within advertised active subnets, dramatically reducing scanning time while maintaining complete device identification capability.
Solution Approach 2:
The system performs preliminary actions by using router advertisements and network discovery protocols to identify active subnets and potential device locations before conducting the actual device scan. This preliminary identification of active network segments allows the system to focus scanning resources only on relevant areas, avoiding the time-consuming task of scanning the entire IPv6 address space.
2Measurement precision
If traditional address sweeping is used in IPv6 networks, then all devices can be discovered, but the complexity of managing the vast address space increases
Solution Approach 1:
The patent introduces router advertisements and network discovery protocols as intermediaries between the scanning system and the IPv6 address space. These intermediaries provide structured information about active subnets and device locations, transforming the unmanageable vast address space into an organized hierarchy of active segments that can be efficiently discovered and managed.
Solution Approach 2:
The system adds a new dimension to address space management by organizing IPv6 addresses into hierarchical subnets with associated metadata from router advertisements. This dimensional organization (subnet hierarchy, active/inactive status, advertisement timing) transforms the flat, overwhelming 128-bit address space into a multi-dimensional structured space that is much easier to manage and scan efficiently.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A pluggable asset detection engine is used to identify devices within a network. The pluggable asset detection engine includes a set of pluggable discovery sensors and is adapted to identify particular address information of a particular computing device within a network, using a first pluggable discovery sensor in the set of discovery sensors, and send an identification of the particular address information of the particular computing device to an asset management system for inclusion of the particular address information in an asset repository managed by the asset management system.