Loading article...
Loading article...
Stream/Area:
-
Subject:
-
Paper ID:
IJSREM64961
Volume:
10 |
6 |
Jun 2026
Pages:
1-9
Publication Frequency:
Monthly (12 issues per year)
License:International Journal of Scientific Research in Engineering and Management follows the Creative Commons Attribution 4.0 (CC BY 4.0) License, allowing free use and distribution with proper attribution.
Computer Networking
PSG POLYTECHNIC COLLEGE
Computer Networking
PSG POLYTECHNIC COLLEGE
Computer Networking
PSG POLYTECHNIC COLLEGE
Computer Networking
PSG POLYTECHNIC COLLEGE
Computer Networking
PSG POLYTECHNIC COLLEGE
Computer Networking
PSG POLYTECHNIC COLLEGE
Computer Networking
PSG POLYTECHNIC COLLEGE
Computer Networking
PSG POLYTECHNIC COLLEGE
The Dynamic Host Configuration Protocol (DHCP) stands as a foundational pillar of modern Internet Protocol (IP) networks, automating the configuration of network interfaces, subnet masks, default gateways, and Domain Name System (DNS) servers. As networks have transitioned from small, static localized entities to massive, highly dynamic corporate, cloud, and Internet of Things (IoT) ecosystems, the operational reliance on DHCP has intensified exponentially. However, the original design parameters of DHCP, codified in RFC 2131 for IPv4 and subsequently updated in RFC 8415 for IPv6 (DHCPv6), focused primarily on operational efficiency, plug-and-play convenience, and cross-platform interoperability, deliberately omitting intrinsic cryptographic authentication and validation mechanisms. Consequently, DHCP remains highly susceptible to severe security exploits, including DHCP starvation attacks, rogue server insertions, man-in-the-middle (MitM) interceptions, and IP address spoofing. This research paper provides an exhaustive, multi-dimensional architectural analysis of DHCP across both IPv4 and IPv6 implementations. It dissects the finite state machine models governing client-server-relay communications, conducts a systematic threat modeling analysis of known protocol vulnerabilities, evaluates existing defense mechanisms such as DHCP Snooping and IP Source Guard, and proposes a next-generation, cryptographically secure framework leveraging modern public-key infrastructure (PKI) and zero-trust verification principles. Through mathematical modeling of address pool depletion vectors and detailed operational flowcharts, this study aims to establish a definitive reference for network architects seeking to harden core infrastructure services against sophisticated network-layer interventions.
KEYWORDS
Host Configuration Protocol remains an essential foundation of IP network automation, but its inherent lack of security leaves modern infrastructures exposed to significant risks. This paper has explored the operational architecture of DHCP, analyzed its major security vulnerabilities, and evaluated both current layer-2 defenses and a proposed cryptographically secure alternative. While hardware-level protections like DHCP Snooping and IP Source Guard remain crucial components of a defense-in-depth strategy, long-term security requires upgrading the protocol itself to incorporate native cryptographic verification. Future research and standardization efforts should focus on optimizing the cryptographic performance of protocols like CS-DHCP to reduce processing overhead on low-power IoT devices. Additionally, integrating zero-trust architecture principles with dynamic network access control (NAC) frameworks will help ensure that automated configuration systems can adapt to evolving threat landscapes and secure next-generation network environments.
[1] Alexander, S., & Droms, R. (1997). "DHCP Options and BOOTP Vendor Extensions," IETF Request for Comments: 2132. [2] Droms, R. (1997). "Dynamic Host Configuration Protocol," IETF Request for Comments: 2131. [3] Mrugalski, T., Troan, O., Farrer, I., Fernandes, S., Cloetens, L., Mudric, D., & Scobie, B. (2019). "Dynamic Host Configuration Protocol for IPv6 (DHCPv6)," IETF Request for Comments: 8415. [4] Postel, J. (1980). "User Datagram Protocol," IETF Request for Comments: 768. [5] Wessels, D. (2007). "DHCP Snooping and Fabric Security Methodologies within Enterprise Switching Topologies," Journal of Computer Communications, vol. 14, no. 2, pp. 112–125. [6] Croft, B., & Gilmore, J. (1985). "Bootstrap Protocol (BOOTP)," IETF Request for Comments: 951. [7] International Scientific Journal of Engineering & Management (ISJEM). "General Submission and Formatting Standards for Core Infrastructure Engineering Publications," Source Query: isjem journal template times new roman
Publication Date
6/16/2026
Peer Review Type
Double-Blind Peer Review
Review Rounds: 2
Documents
Article Views
0
Total views since publication
PDF Downloads
3
Total downloads since publication
Geographic Reach
5
Digital Preservation: This article is permanently archived on Zenodo and complies with all data preservation standards across major indexing platforms.
Plagiarism Screening
This manuscript has been checked for plagiarism using TurnitinPlagiarismChecker software.
Conflict of Interest
The authors declare no conflict of interest related to this research work.
Funding Information
Funding Agency: IJSREM
Grant / Project ID: 23
Related research in the same subject area
Loading similar articles...