Petri Net Model of MITM Attack Based on NDP Protocol

Neighbor Discovery Protocol (NDP) is one of the core protocols of IPv6 networks. Since NDP messages are an unauthenticated stateless protocol, they are vulnerable to various types of attacks, and Man-In-The-Middle (MITM) attacks are one of the most well-known attacks in the computer field. During NDP address resolution, attackers change their own IP-MAC mapping relationships by sniffing NA (Neighbor Advertisement) messages, thus spoofing the source host's neighbor cache table and compromising the confidentiality, integrity and availability of the IPv6 network. Therefore, this paper focuses on the MITM attack in the NDP address resolution process, and performs a fine-grained analysis and Petri Net modelling of the attack process.