{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T16:05:42Z","timestamp":1771517142321,"version":"3.50.1"},"reference-count":59,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100004595","name":"Research University (RU) Grant, Universiti Sains Malaysia","doi-asserted-by":"publisher","award":["1001. PNAV.8011107"],"award-info":[{"award-number":["1001. PNAV.8011107"]}],"id":[{"id":"10.13039\/501100004595","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/access.2021.3066630","type":"journal-article","created":{"date-parts":[[2021,3,17]],"date-time":"2021-03-17T19:49:20Z","timestamp":1616010560000},"page":"45512-45526","source":"Crossref","is-referenced-by-count":13,"title":["Flow-Based Approach to Detect Abnormal Behavior in Neighbor Discovery Protocol (NDP)"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2307-6302","authenticated-orcid":false,"given":"Abdullah Ahmed","family":"Bahashwan","sequence":"first","affiliation":[{"name":"National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7026-6408","authenticated-orcid":false,"given":"Mohammed","family":"Anbar","sequence":"additional","affiliation":[{"name":"National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2275-3201","authenticated-orcid":false,"given":"Iznan Husainy","family":"Hasbullah","sequence":"additional","affiliation":[{"name":"National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4748-8037","authenticated-orcid":false,"given":"Ziyad R.","family":"Alashhab","sequence":"additional","affiliation":[{"name":"National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8042-5938","authenticated-orcid":false,"given":"Ali","family":"Bin-Salem","sequence":"additional","affiliation":[{"name":"School of Computer Science, Neijiang Normal University, Neijiang, China"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.15439\/2014F287"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04968-2_4"},{"key":"ref33","first-page":"1","article-title":"Labeled flow-based dataset of ICMPv6-based DDoS attacks","volume":"31","author":"elejla","year":"2018","journal-title":"Neural Comput Appl"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-019-01569-8"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89862-7_18"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.11591\/telkomnika.v13i1.6929"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3917"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/s13369-018-3149-7"},{"key":"ref35","year":"2020","journal-title":"Go Deep"},{"key":"ref34","year":"2020","journal-title":"TCPDUMP\/LIBPCAP public repository"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0214518"},{"key":"ref27","first-page":"603","article-title":"Review of security vulnerabilities in the IPv6 neighbor discovery protocol","author":"anbar","year":"2016","journal-title":"Information Science and Applications"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3176653.3176707"},{"key":"ref2","first-page":"399","article-title":"A framework of features selection for IPv6 network attacks detection","volume":"14","author":"zulkiflee","year":"2015","journal-title":"WSEAS Trans Commun"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s12046-019-1244-4"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1504\/IJSOI.2019.100622"},{"key":"ref22","first-page":"119","author":"frankel","year":"2010","journal-title":"Guidelines for the Secure Deployment of IPv6 (Draft)"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-017-2967-y"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4862"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-2622-6_31"},{"key":"ref26","first-page":"1","article-title":"Neighbour discovery in IPv6","volume":"2","author":"hines","year":"2004","journal-title":"Organiser Christian Schindelhauer"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2388576.2388600"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2015.7069319"},{"key":"ref51","first-page":"1","article-title":"Cusum-entropy: An efficient method for DDoS attack detection","author":"\u00f6z\u00e7elik","year":"2016","journal-title":"4th International Istanbul Smart Grid Congress and Fair (lCSG)"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1002\/ett.3700"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3394956"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/s12559-017-9519-8"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2016.7906975"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3009733"},{"key":"ref54","year":"2020","journal-title":"The Software that Empowers Network Professionals"},{"key":"ref53","year":"2020","journal-title":"Penetration Testing Tools"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3697"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICNS.2007.106"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1080\/02564602.2015.1098576"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.05.009"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICITCS.2015.7293014"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2970787"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-95957-3_58"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/DeSE.2018.00028"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1080\/02564602.2016.1192964"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.27"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-2693-0_11"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CompComm.2016.7925057"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.13052\/jcsm2245-1439.811"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnlest.2020.100059"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/s13369-018-3643-y"},{"key":"ref5","author":"deering","year":"2007","journal-title":"Internet protocol Version 6 (IPV6) specification"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2461"},{"key":"ref7","year":"2021","journal-title":"Google"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2015.04.007"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3022963"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-018-5288-2"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1051\/matecconf\/201821802012"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.09.056"},{"key":"ref47","first-page":"596","article-title":"Anomaly detection using source port data with Shannon entropy and EWMA control chart","author":"ransewa","year":"2018","journal-title":"Proc 18th Int Conf Control Autom Syst (ICCAS)"},{"key":"ref42","first-page":"47","article-title":"Entropy-based Internet traffic anomaly detection: A case study","author":"berezi?ski","year":"2014","journal-title":"Proc Int Conf Dependability Comput Syst"},{"key":"ref41","doi-asserted-by":"crossref","DOI":"10.3990\/1.9789036530897","article-title":"Flow-based intrusion detection","author":"sperotto","year":"2010"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3013998"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.3390\/e17042367"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9312710\/09380280.pdf?arnumber=9380280","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,8]],"date-time":"2022-09-08T20:30:49Z","timestamp":1662669049000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9380280\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":59,"URL":"https:\/\/doi.org\/10.1109\/access.2021.3066630","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}