# An Adaptive Security Framework for Internet of Things Networks Leveraging SDN and Machine Learning
## 4 Secure IoT Communication and Attack Mitigation
### IPv6 Protocol and IoT Communications  
IoT refers to the billions of internet-connected devices and sensors that collect and share data. To support the massive growth of IoT devices, the transition from the IPv4 protocol to the newer IPv6 protocol is essential. IPv6 adoption is accelerating globally for  
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Technique/Approach** & **Key Features** & **Advantages** & **Limitations** \\ \hline \multirow{2}{*}{**SEND [(20)]**} & Secure NDP, cryptographic mechanisms & Mitigates NDP attacks; provides authentication and integrity & Complexity, overhead, limited adoption \\ \hline \multirow{2}{*}{**Authentication Framework [(4)]**} & Multicast key management, IPv5, AH, MAC options & Prevents forged ND messages; demands against various NDP attacks & Increased complexity, potential performance impact \\ \hline \multirow{2}{*}{**Match Prevention [(22)]**} & Secures target IP addresses and exchange messages & Mitigates DoS attacks on address resolution and DAD & Limited scope, focuses on specific attack scenarios \\ \hline \multirow{2}{*}{**Entropy-based Detection [(15)]**} & Detects randomness of flowing data & Rapid detection of TCP SYN flood attacks & Cumbersome implementation for DDoS detection \\ \hline \multirow{2}{*}{**Petri Net Modeling [(14; 28)]**} & Formal modeling, graphical representation & Describes complex interactions, enables security analysis & Requires expertise in Petri net modeling \\ \hline \multirow{2}{*}{**SDN-based Security [(21; 28)]**} & Centralized control, programmability & Global network view, dynamic security policies, rapid threat response & Potential single point of failure, scalability concerns \\ \hline \multirow{2}{*}{**Hybrid Crypto Access Control [(24)]**} & Attribute-based encryption, symmetric crypto, hash-based authentication & Secure data sharing and access control in IoT & Complexity, key management overhead \\ \hline \multirow{2}{*}{**ML for UAV Control [(25)]**} & Performance index optimization, dynamic optimal allocation & Enhances UAV control efficiency and robustness & Computational complexity, training data requirements \\ \hline \multirow{2}{*}{**Lightweight Auth for WSNs [(26)]**} & Symmetric key crypto, hash-based auth & Secure comm. and fault tolerance in WSNs & Limited resources in WSNs \\ \hline \multirow{2}{*}{**ICMPv6 DDoS IDS [(14)]**} & Machine learning for traffic analysis & Effective detection of ICMPv6 & False positives, training data requirements \\ \hline \multirow{2}{*}{**Petri Net Model for MITM [(24)]**} & Formal modeling of MITM attacks & Identifies MITM vulnerabilities and countermeasures & Model complexity, scalability \\ \hline \multirow{2}{*}{**AloT for Digital Twin Comm. [(15)]**} & Machine learning, IoT technologies for digital twins & Intelligent and efficient digital twin communication & Computational complexity, data privacy \\ \hline \hline \end{tabular}
\end{table}
Table 5: Comparison of methods and strategies for NDP security.  
IoT implementations due to the benefits of IPv6, such as expanded addressing, simplified packet handling, and built-in security.