Subsection 5.4.2 of the above NIST publication briefly describes the SEND protocol. The SEcure Neighbor Discovery ( SEND) protocol described in RFC 3971, as further updated by 6494, 6495, and 6980, has been defined which can counter many of the threats to the NDP described in the remainder of this article. References in the IPv6 and IoT Security Best Practices article in the Security section also describe mitigations for various NDP threats. RA-Guard is also discussed in Definition and Prevention of rogue Router Advertisements in the DHCP and SLAAC on IPv6 Networks article in the Infrastructure section. They describe mitigations for the various NDP threats as originally identified in RFC 3756 published in 2004 and described in the remainder of this article. In addition, RFC 6105 Router Advertisement Guard ( RA-Guard) as further updated by 7110, 7113, and Internet Draft ND-Shield have been published. Subsection 3.5.3 of the National Institute for Standards and Technology ( NIST) Special Publication 800-119 Guidelines for the Secure Deployment of IPv6, Dec, 2010, briefly describes the NDP and its improvements over the ARP, and Subsection 3.5.4 of that publication briefly describes some of the security ramifications.

It effectively replaces the Address Resolution Protocol (ARP) used by IPv4. The Neighbor Discovery Protocol ( NDP) for Internet Protocol version 6 (IPv6) is described in Internet Engineering Task Force ( IETF) Request for Comments ( RFC) 4861 (as further updated by 5942, 6980, 7048, 7527, 7559, 8028, 8319, 8425 and 9131).

Ipv6 ddos attack tools